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SUMMARY 


BACKGROUND 


Because  three-quarters  of  all  energy  consumed  in  the  United  States 
comes  from  petroleum  fuels,  the  industry  is  essential,  yet  petroleum  refining 
is  vulnerable  to  nuclear  attack,  due  to  geographical  concentration  and  tc  the 
highly  combustible  nature  of  its  raw  materials  and  products.  The  assess¬ 
ment  of  this  vulnerability,  and  the  development  of  an  appropriate  methodology 
for  preattack  damage  estimation  and  postattack  repair  allocations  in  this 
industry  is  the  chief  purpose  of  Critical  Industry  Repair  Analysis:  Petroleum 
Industry. 

The  work  on  this  report  was  begun  under  Contract  OCD-OS-62-257 
by  the  Office  of  Civil  Defense,  Department  of  the  Army,  the  latter  part  or  the 
work  was  completed  under  B-70916(494DA-33)-US,  a  subcontract  from  Stanford 
Research  Institute,  Menlo  Park,  California. 

SCOPE 

The  heart  of  the  petroleum  industry  is  the  refineries  which  transform 
crude  oil  into  fuels,  lubricants,  waxes,  and  petrochemicals,  and  the  major 
effort  of  this  project  has  been  directed  at  analysis  of  vulnerability  and  post¬ 
attack  repair  of  refineries,  during  the  survival  period. 

While  many  peripheral  areas  may  merit  investigation,  it  is  none¬ 
theless  true  that  the  oil  fields  and  the  pipelines,  carriers,  storage  terminals, 
and  retail  distributors  are  far  less  vulnerable  than  the  refineries.  However, 
key  inputs  to  the  various  plants  are  also  examined.  Crude  oil  production  is 
not  studied  because  of  its  wide  dispersion;  TEL  is  studied  and  production 
analyzed  at  a  Dupont  plant. 

Three  refineries  are  analyzed  in  detail,  to  assess  their  'ulnerability 
and  the  probable  damage  from  attack  by  megaton-range  weapons.  The  post- 
attack  repair  times  are  based  on  these  damage  estimates 

A  Baton  Rouge  refinery  — the  nation's  largest—  was  selected  because 
it  underwent  an  emergency  shutdown  caused  by  electric  power  failure.  A 
Whiting,  Indiana  refinery  was  chosen  because  of  a  major  process  unit  explosion 
which  caused  widespread  fire  damage.  A  refinery  in  Pascagoula,  Mississippi 
was  studied  because  it  has  modern  features,  representing  future  trends,  such 
as  isocracking. 

Costs  and  repair  efforts  are  analyzed  based  on  the  damage  sustained. 
Labor  inputs  are  documented  for  a  number  of  specific  cases  using  a  CPM  tech¬ 
nique;  material  requirements,  repair  equipment  requirements,  and  various 
alternative  possibilities  were  analyzed. 

Considerations  of  the  methodology  of  the  damage  estimates  and  repair 
led  to  construction  of  flow  charts,  showing  generalized  damage  analysis  method¬ 
ology  and  a  generalized  repair  chart. 
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Some  substitutes  for  gasoline  are  studied.  The  recommendation 
of  techniques  for  hardening  the  weak  links  are  left  to  the  future. 

CONCLUSIONS 


Calculations  indicate  that  any  refinery  within  a  10-mile  radius  of 
a  1-MT  weapon's  ground  zero,  where  the  overpressure  will  be  1 .  5  psi  or 
greater,  will  suffer  heavy  damage  resulting  in  forced  shutdown  for  several 
months.  This  high  vulnerability  is  due  to  the  cooling  towers  and  controlhouse 
roofs,  which  are  heavily  damaged.  With  the  exception  of  a  crude  still,  a 
modern  refinery  cannot  operate  without  the  instruments  in  a  controlhouse 
and  repair  of  the  controlhouse  complex,  in  particular,  is  lengthy.  Without 
cooling  towers,  it  is  impossible  to  operate  a  refinery. 

A  minimum  of  163  weapons,  properly  placed,  could  severely 
damage  all  U  S.  refineries,  but  one  weapon  can  similarly  affect  10  per  cent 
of  all  refining  capacity,  three  can  seriously  affect  25  percent,  and  nine  can 
account  for  51  percent.  The  industry  is  vulnerable  on  a  national  basis  be¬ 
cause  of  both  tile  vulnerability  of  individual  refineiies  and  the  geographical 
concentration,  particularly  in  populous  urban  areas.  Therefore,  an  attack 
on  population  centers  would  destroy  much  of  the  national  refining  capacity. 

Distribution 


Locations  of  the  world's  known  crude  oil  reserves  are:  United 
States,  11  percent;  Middle  East,  62  per  cent;  U.S.S.R.  and  bloc,  10  percent; 
South  America,  7  percent;  Africa,  4  percent;  and  other,  6  percent.  United 
States  consumption  of  petroleum  products  is  divided  between  commercial- 
industrial  users,  48  percent;  personal  (autos,  home  fuel)  38  percent;  farm, 

10  percent;  and  military,  4  percent.  Most  U.S.  crude  oil  is  transported  by 
pipeline,  although  the  east  coast  is  entirely  ship-supplied,  while  trucks  and 
ships  are  leading  transporters  of  refined  products.  The  best  substitute  for 
gasoline  is  liquid  petroleum  gas  (LPG)  which  can  successfully  run  gasoline 
and  diesel  engines  after  a  somewhat  complicated  engine  conversion.  While 
pipelines  are  not  vulnerable,  their  pumping  stations  largely  depend  on 
electricity;  electrical  failure  will  shut  down  both  the  stations  and  refineries. 
The  total  amount  of  stored  crude  oil  in  the  U.S.  is  only  eight  days'  supply  at 
current  refinery  consumption  rates,  not  a  meaningful  postattack  "eserve. 


Refinery  vulnerability 

The  most  vulnerable  components  of  a  refinery  are  the  controlhouse 
and  cooling  towers,  as  noted  above.  Replacement  of  wooden  cooling  towers 
is  relatively  easy,  but  controlhouse  repair  is  time-consuming.  With  the 
possible  exception  of  the  crude  still,  operation  without  automatic  controlhouse 
instruments  is  impossible  because  refining  is  a  highly  complex,  automated 
operation.  Storage  units  can  cause  severe  damage  through  spilled  gases  and 
liquids  from  blast- ruptured  tanks  flowing  into  the  refining  area,  finding  an 
ignition  source,  and  burning.  Empty  cylindrical  tanks  fail  by  uplift  at  1 . 5 
psi;  when  full,  at  6.  5  psi.  Spherical  tanks  are  less  vulnerable,  failing  by 
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overturning  at  9.  0  psi.  Many  tank  areas  arc  diked  so  as  to  retain  contents 
of  only  the  largest  tank;  if  more  than  one  tank  ruptures,  overflow  will  result. 
Tanks  and  contents  arc  not  of  great  importance  in  the  refining  operation,  which 
does  not  depend  as  much  on  storage  as  on  processing  units. 

Weak  links 

The  refineries  are  the  weak  link  of  the  industry.  Controlhouses 
and  cooling  towers  are  the  weak  links  of  the  refineries,  because  they  are 
essential  to  operation  and  fail  at  very  low  overpressures.  Another  weak  link 
is  tetraethyl  lead  (TEL),  which  is  necessary  to  get  high  octane  gasoline  in 
appreciable  quantities,  and  there  are  only  seven  TEL  plants  in  the  United  States. 

Blast  damage 

The  failure  of  the  controlhouse  roof  and  cooling  towers  due  to  blast 
arc  discussed  above.  Blast  will  overturn  the  pipe  still  at  7.  5  psi,  due  to  anchor 
bolt  failure.  The  fractionator  tower  will  fail  for  the  same  reason,  at  7.0  psi. 
The  two  cat  crackers  analyzed  will  fail  at  12  and  16  psi;  and  their  regenerators 
will  overturn  at  7.0  and  16  psi  respectively.  Other  points  of  collapse:  deiso¬ 
butanizer  tower,  9.5  psi;  furnace  stacks,  6.0  psi;  maintenance  building,  6.0 
psi;  tower-supported  flares,  3.  0  psi.  Collapse  of  high  structures  will  cause 
great  damage  to  equipment  beneath  and  adjacent.  These  figures  apply  to  a 
shut  down  refinery  and  most  are  irrelevant  in  the  case  of  probable  total  de¬ 
struction  of  an  operating  refinery  by  fires  and  detonations  when  pipes  are 
broken  and  major  units  displaced  at  5.  0  psi. 

The  methodology  for  blast  damage  calculations  involves  the  follow¬ 
ing  assumptions:  "table  top"  conditions,  front-face  orientation,  equivalent 
triangular  representation  of  the  blast  loading,  bilinear  resistance  function, 
single-degree -of-freedom  system  and  high- megaton- range  weapons. 

Fire  damage 

Fire  due  to  thermonuclear  attack  is  similar  to  a  "normal"  fire, 
except  that  frTout  arrival  may  curb  firefighting.  Because  they  contain  volatile 
combustible'  ,  the  greatest  fire  danger  exists  in  the  operating  processing  units. 

If  the  refinery  is  shut  down  and  the  units  are  emptied  of  ml  combustibles,  then 
the  maximum  fire  danger  is  transferred  to  the  storage  tanks.  Gases  in  pro¬ 
cess  that  are  heated  above  their  autoignition  temperatures  will  immediately 
ignite  upon  being  released  into  the  air;  otherwise,  an  ignition  source  is  needed 
and  spilled  stored  fuels  need  not  necessarily  ignite,  particularly  if  the  refinery 
is  shut  down.  However,  blast-produced  metal  missiles  can  produce  incendiary 
sparks  upon  striking  other  metal.  Thermal  radiation  is  an  unlikely  ignition 
source.  Fire  weakens  critical  steel  such  as  tower  supports  beyond  repair  and, 
while  water  cannot  extinguish  petroleum  fires,  it  can  cool  metal  to  prevent 
weakening.  Other  firefighting  techniques  include  foam,  air  agitation,  and 
emergency  diking  with  sand.  Firefighting  strategy  is  generally  to  contain  the 
fire  and  let  it  burn  itself  out. 
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Shutdown 


As  noted,  shutdown  can  make  the  difference  between  a  refinery  totally 
destroyed  at  5,0  psi  and  one  still  repairable  after  a  12.0  psi  blast.  A  few 
minutes  warning  time  can  permit  significant  measures,  while  four  hours  per¬ 
mit  a  relatively  normal  shutdown  with  minimal  damage.  Proper  preplanning 
and  personnel  training  arc  essential.  But  shutdown  is  costly  in  terms  of  lost 
production.  The  report  gives  two  case  histories  of  emergency  shutdowns, 
based  on  power  failure  and  fire.  In  the  former,  shutdown  was  immediate  and 
successful,  with  no  warning  time;  in  the  latter,  poor  procedures  may  have  con¬ 
tributed  to  major  devastation. 

Repair 


The  speed  and  effectiveness  of  postattack  repair  of  refineries  will 
depend  on  the  level  of  damage,  availability  of  construction  equipment,  re¬ 
placement  parts  and  materials,  labor,  blueprints,  and  salvageability  of  damaged 
equipment.  Actual  case  histories  of  construction  and  repair  projects  at  re¬ 
fineries  are  given,  and  the  repair  estimates  are  largely  based  on  these  data. 

Critical  path  scheduling  techniques  provide  a  valuable  tool  for  plan¬ 
ning  repair  effort.  The  most  critical  components,  from  the  standpoint  of  lead 
time  are  turbines  and  compressors,  slide  valves,  pressure  vessels,  and  heat 
exchangers. 

The  order  in  which  processing  units  should  be  repaired  will  depend 
upon  minimum  postattack  fuel  requirements.  A  typical  example  might  be: 
first,  the  crude  oil  still  for  straight  run  gasoline,  jet,  diesel,  and  furnace 
fuel;  second,  the  catalytic  cracker  for  high  octane  gasoline  and  light  naphtha; 
then  vapor  recovery  units  for  butane  and  propane;  and  lastly,  the  alkylation 
plant  for  high  octane  alkylate.  Refineries  should  be  rebuilt  generally  close 
to  preattack  design,  to  save  months  of  additional  repair  time  due  to  major 
redesign.  Field  fabrication,  substitutions,  and  cannibalization  will  be  advan¬ 
tageous.  Because  cone  roof  tanks  are  easier  to  repair  than  floating  roof  tanks, 
they  might  replace  the  latter  for  gasoline  storage.  Gin  poles  and  cranes, 
possibly  brought  in  from  a  neighboring  refinery,  will  be  needed  for  reerection 
of  towers.  Long-lead -time  items  include  compressors,  slide  valves,  pressure 
vessels,  and  heat  exchangers. 


A  number  of  typical  repair  schedules  are  given,  compiled  from 
detailed  damage  calculations;  they  are  scheduled  by  means  of  the  critical 
path  technique.  Labor  requirements  are  broken  down  into  12  basic  categories. 
Typical  repair  times  (assuming  no  labor  shortages)  range  from  188  eight-hour 
calendar  days  for  controlhouse  damage  at  1. 5  psi.  to  a  maximum  of  277  days 
to  repair  a  crude  still  damaged  at  7.0  psi. 


Techniques  for  scaling,  applicable  to  lengths  of  postattack  repair 
times,  are  briefly  outlined.  A  conclusion  involves  an  average  scaling  exponent 
of  0.75  as  in  the  following  formula: 

p  p  0.75 


Labor  time  for  postattack  repair  of  A  _  Capacity  A 
Labor  time  for  postattack  repair  of  B  Capacity  B 
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This  0.  75  exponent  would  apply  to  high  damage  levels  and  was  de¬ 
termined  by  averaging  exponents  tor  individual  processing  and  storage  units. 

An  exponent  of  0.35  seems  more  appropriate  at  low  damage  levels. 

R  F.C’QM  M  MX  DA  TIONS  FOR  FURTHER  STUDY 

Repair  times  in  this  study  are  based,  out  of  necessity  imposed  by 
limitation  of  scope,  on  the  assumptions  that  replacement  parts,  materials 
for  repair,  and  trained  operators  and  repair  personnel  are  all  available. 

There  are  no  criteria  as  yet  to  indicate  the  probable  postattack  availability 
of  these  essential  inputs  to  repair,  in  particular,  repair  charts  should  be 
prepared  for  those  industries  specializing  in,  and  essential  to,  reconstruction 
of  refineries. 

A  similar  advantage  could  be  obtained  in  updating  prior  studies  on 
petroleum  products  distribution. 

This  petroleum  study  points  out  the  dependence  of  many  refineries 
on  electricity  from  outside  power  plants.  Conversely,  many  electric  power 
generating  plants  depend  upon  petroleum  products.  In  connection  with  the 
Critical  Industry  Repair  series,  of  which  this  report  is  a  part,  it  may  prove 
beneficial  to  reexamine  electric  power.  Critical  Industries  Repair  Analysis: 
Electric  Power,  by  Advance  Research,  used  earlier  techniques  which  have 
become  somewhat  outdated  by  advances  in  the  state  of  the  art  in  the  more  than 
three  years  since  it  was  published.. 

The  identification  of  the  controlhouse  and  cooling  tower  as  the  re¬ 
finery  weak  links  is  one  of. the  most  significant  findings  of  this  study.  Because 
they  fail  at  low  overpressures,  thereby  destroying  the  automatic  instrumentation 
and  cooling  capacity  without  which  most  of  the  refinery  processing  units  cannot 
operate,  they  present  an  excellent  opportunity  for  hardening,  A  controlhouse 
hardening  study  could  use  techniques  employed  in  prior  industrial  hardening 
studies  by  this  corporation. 

Key  essential  chemical  inputs  to  petroleum,  including  tetraethyl 
lead  and  chlorine,  merit  further  study.  Resonant  periods  of  vibration  of 
buildings  deserve  further  investigation  because  of  insufficient  data,  at  present, 
to  obtain  precise  results.  Failure  of  concrete  slabs,  such  as  the  administration 
building  floor  merit  further  investigation. 

In  connection  with  these  projected  studies,  it  is  anticipated  that  the 
computer  program  for  the  analyses  of  structures  subjected  to  blast  loading  will 
be  improved  and  published. 
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ABSTRACT 


The  American  petroleum  industry  is  analyzed  in  terms  of 
vulnerability  to  megaton-range  weapon  attack  and  of  postattack  repair, 
with  particular  emphasis  on  refineries,  based  on  three  operating 
refineries  which  were  visited  and  studied  in  detail. 

An  appropriate  methodology  for  damage  analysis  is  de¬ 
veloped.  Results  include  the  first  application  of  CPM  charts  to  the 
repair  analysis,  the  generation  of  a  generalized  model  for  damage 
analysis,  and  the  development  of  a  preliminary  repair  model. 

Significant  findings:  Two  critical  refinery  elements  are 
especially  vulnerable  to  blast,  controlhouse  roofs  at  1.5  psi,  and 
cooling  towers  at  3.  5  psi.  Repair  times  are  lengthy,  with  a  minimum 
of  188  eight-hour  calendar  days  for  the  controlhouse.  and  up  to  277 
days  if  a  crude  still  collapses  (at  7.0  psi).  Shutdown  is  essential  to 
avoid  destruction  of  processing  units  by  fire  due  to  moderate  blast 
overpressures,  and  rapid  shutdown  can  be  accomplished  in  less  than 
15  minutes  with  less  damage  than  that  which  would  result  from  a 
moderate  blast  striking  an  operating  refinery. 

Controlhouses  are  the  weak  links  of  the  refineries,  and  the 
refineries  are  the  weak  links  of  the  petroleum  industry.  Because  of 
geographical  concentration,  one  properly- placed  weapon  can  seriously 
damage  10  percent  of  U,  S,  refining  capacity;  three  weapons,  25  per 
cent;  and  nine  weapons,  51  per  cent. 
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1 .  INTRODUCTION 


1.  1  Background 

Approximately  three-quarters  of  all  energy  currently  consumed  in 
the  United  States  comes  from  petroleum,  and  its  associated  fuel,  natural 

5 

gas;  this  in  itself,  illustrates  the  essentiality  of  the  industry  in  the  pre¬ 
attack  environment.  In  addition,  petroleum  refining  is  especially  vul¬ 
nerable  to  nuclear  attack  because  of  its  geographical  concentration,  as 
well  as  its  combustible  materials.  The  assessment  of  this  vulnerability, 
and  of  the  postattack  repair  problems  associated  with  it,  is  the  purpose 
of  Critical  Industry  Repair  Analysis;  Petroleum  Industry.  This  is  the 
fourth  in  a  continuing  series  by  Advance  Research  on  problems  of  post¬ 
attack  repair  of  United  States  industries.  Its  predecessors  include  the 
steel  industry,  electric  power,  and  food.  "  This  current  study  is  a 
logical  sequel  to  the  food  industry  study,  which  demonstrated  that  while 
postattack  food  stocks  appear  adequate  under  most  circumstances,  the 
weak  link  could  be  transportation  of  food,  in  turn,  directly  dependent 
upon  petroleum  products. 

The  work  on  this  report  started  under  contract  OCD-OS-62-257, 
by  the  Office  of  Civil  Defense,  Department  cf  Defense,  and  is  being 
completed  under  B-70916(4949A-33)-US,  a  subcontract  from  Stanford 
Research  Institute,  Menlo  Park,  California  under  contract  OCD-PS-64-201, 

1.2  Scope 

The  heart  of  the  petroleum  industry,  both  in  the  preattack  context 
and  particularly  in  terms  of  postattack  repair,  is  the  refineries,  which 
transform  crude  oil  into  its  many  essential  end  products:  fuels,  lubricants, 
waxes,  and  petrochemicals,  (See  figure  3.  1.)  While  many  peripheral 
areas  offer  themselves  as  worthwhile  areas  of  investigation,  it  is  gen¬ 
erally  true  that  the  original  producers  (the  oil  fields)  and  the  distribution 
network  (the  pipelines,  carriers,  storage  terminals,  and  retail  dis¬ 
tributors)  are  far  less  vulnerable  than  the  refineries,  which  are  relatively 
few  in  number  and  somewhat  geographically  concentrated.  Therefore, 
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the  major  effort  of  this  project  is  directed  at  vulnerability  and  postattack 
repair  of  refineries,  as  dictated  both  by  their  importance  to  the  industry 
and  by  the  necessarily  limited  scope  of  the  investigation. 

1,3  Approach 

Accordingly,  three  refineries  are  examined  and  analyzed  in  detail, 
in  order  to  estimate  their  vulnerability,  and,  based  on  this,  the  probable 
damage  calculated  to  result  from  attack  with  megaton-range  weapons. 

The  postattack  repair  times  and  schedules  are  based  on  such  damage 
estimates.  It  should  be  pointed  out,  however,  that  repair  is  obviously 
in  part  a  function  of  priorities  assigned  on  the  basis  of  knowledge  of 
essential  oil  refining  processes,  as  well  as  on  the  extent  of  damage  as 
a  whole. 

The  three  refineries  are  described  in  detail  in  appendix  A:  The 
362,000  b/cd  Baton  Rouge  (Louisiana)  refinery  of  Humble  Oil  &  Refining 
Company,  the  207,000  b/cd  Whiting  (Indiana)  refinery  of  American  Oil 
Company,  and  the  100,000  b/cd  Pascagoula  (Mississippi)  refinery  of 
Standard  Oil  Company  of  Kentucky. 

The  Humble  refinery  is  selected  because  of  its  size  — it  is  the 
nation's  largest-and  because  it  has  a  wide  range  of  processes  and 
products.  Of  particular  interest  is  an  actual  emergency  shutdown 
caused  by  electric  power  failure,  described  in  chapter  3.  Whiting  is 
chosen  primarily  because  it  underwent  a  major  process  unit  explosion 
in  1955,  which  caused  widespread  fire  damage  due  to  secondary  missiles. 
The  Pascagoula  refinery  is  designated  because  it  is  modern,  completed 
in  1963.  Modern  features  of  particular  importance,  probably  repre¬ 
senting  future  trends,  include  the  use  of  hydrocracking  to  provide  unusual 
flexibility  in  the  percentage  yield  of  light  or  heavy  refined  products, 
flexibility  in  the  overall  throughput  rate,  the  use  of  a  highly  automated 
in-line  blending  system,  and  innovations  in  cooling  tower  and  air-cooled 
heat  exchangers. 

The  obverse  of  essential  processes  is  essential  products,  which 
were  examined,  and  are  discussed  in  some  detail.  Essential  post¬ 
attack  fuels  are  designated  as  diesel  fuel;  motor  gasoline  for  automobiles. 
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trucks,  and  certain  tractors;  aviation  gasoline  or  "avgas";  tractor  fuel, 
a  low  octane  gasoline;  jet  aircraft  fuel,  a  kerosine  derivative;  and  furnace 
fuel. 

In  addition  to  the  refineries,  and  their  essential  processes  and 
products,  a  tetraethyl  lead  (TEL)  plant  is  analyzed,  and  the  applications 
of  TEL  evaluated,  since  without  it  most  of  the  gasoline  produced  would 
be  either  useless  or  damaging  in  today's  high  compression  gasoline 
engines. 

While  these  refineries  are  described  individually  in  some  detail 
in  the  appendix,  it  is  felt  to  be  neither  desirable  nor  necessary  to  do  so 
in  the  main  body  of  the  report;  rather,  their  salient  features  are  intro¬ 
duced  where  pertinent  to  the  general  topic,  particularly  in  terms  of 
significant  processes,  equipment,  and  actual  histories  of  forced  shut¬ 
downs,  fires,  explosions,  and  like  phenomena  which  could  be  expected 
to  result  from  nuclear  attack  as  well  as  from  'hormal"  preattack  causes. 

Four  principal  steps  are  involved  in  the  investigative  approach: 

1.  Analysis  of  processes  and  operations,  to  determine 
critical,  essential  processes  and  their  vulnerability 
in  general. 

2.  Evaluation  of  selected  items  of  plant  equipment  and 
structures,  to  determine  response  and  damage  re¬ 
sulting  from  blast  and  thermal  radiation  at  varying 
levels  of  intensity.  Secondary  effects,  such  as  those 
caused  by  missiles  and  inadequate  shutdown  (which 
may  cause  greater  damage  than  primary  effects)  are 
also  estimated. 

3.  Estimates  of  repair  and  reconstruction  efforts  re¬ 
quired  to  return  damaged  facilities  to  full  operating 
condition,  for  various  levels  of  blast  overpressure. 

Methodology  for  the  repair  estimates  involved  the 
use  of  the  Critical  Path  Method, 

4.  Analysis  of  qualitative  fuel  requirements,  in  the 
postattack  situation,  and  means  by  which  surviving 
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facilities  can  be  returned  V'  production  in  the  shortest 
possible  time.  This  includes  the  possible  elimination 
of  certain  processes,  the  combining  of  facilities,  and 
the  interchangeability  of  equipment  and  crews,  con¬ 
sistent  with  balanced  refinery  operations, 

There  are  several  important  differences  between  the  current  study 
8  9 

and  prior  studies,  *  of  the  effects  of  nuclear  weapons  on  the  petroleum 
industry,  aB  follows: 

1.  A  point- by-point  analysis  is  made  of  specific  units,  and 
the  weak  lin!  s  in  the  entire  manufacturing  process  are 
identified. 

2.  Apart  from  higher  yield,  the  effects  of  weapons  in  the 
megaton  range,  as  compared  to  the  kiloton  range  at  the 
same  range  of  overpressure,  differ  primarily  in  the  former's 
much  greater  positive  phase  duration  of  blast  pulse  and 

the  greater  intensity  and  duration  of  the  thermal  radiation 
pulse.  In  the  petroleum  industry,  this  has  a  particular 
significance  in  the  response  of  storage  tanks  and  refinery 
towers  and  structures  subject  to  blasts.  In  the  kiloton 
range,  the  duration  would  be  only  about  one-tenth  that  of 
the  megaton  range  for  the  same  overpressure.  At  this 
same  overpressure,  the  equivalent  static  stress  in  a 
structure  would  be  substantially  greater  in  the  megaton 
range  because  the  ratio  of  pulse  duration  to  natural  period 
of  the  structure  influences  its  ability  of  absorb  suddenly- 
applied  loads. 

3.  Because  of  the  great  fire  hazard  in  the  industry,  the  effects 
of  actual  fires  and  disasters  on  petroleum  industry  facilities 
are  cited  in  some  detail  to  arrive  at  estimates  of  fire  damage 
resulting  from  nuclear  attack. 

4.  Repair  estimates,  using  CPM,  are  made  for  a  range  of 
damage  levels  corresponding  to  the  findings  of  blast  damage 
calculations. 


The  majority  of  the  data  in  the  report  derives  from  three  refinery 
visits.  The  results  of  an  extensive  review  of  existing  literature  and 
meetings  with  trade  associations  and  Government  agencies  are  likewise 
included. 


2.  SUMMARY 


2. 1  National  vulnerability  evaluation 

The  vulnerability  of  the  United  States'  crude  oil  refining  industry 
to  a  hypothetical  attack  pattern  is  evaluated  on  the  basis  of  weapons 
of  one  megaton  (l-MT)j  exploded  at  optimum  burst  height.  Calculations 
indicate  that  any  refinery  within  a  10-mile  radius  of  ground  zero,  where 
the  overpressure  is  1,5  psi  or  greater,  will  suffer  heavy  damage  result¬ 
ing  in  forced  shutdown  for  several  months. 

This  high  degree  of  vulnerability  at  a  relatively  low  overpressure 
is  due  to  the  controlhouses,  which  would  be  heavily  damaged  in  the  1.0  - 
1.5  psi  range.  With  the  exception  of  the  crude  stills,  the  refineries 
cannot  operate  without  them,  and  repair  of  controlhouses  is  lengthy. 

The  results  of  the  analysis  indicate  that  a  minimum  of  163  weapons, 
placed  so  as  to  avoid  overlapping  and  to  damage  the  controlhouses  severely, 
are  required  to  shut  down  all  288  refineries,  but  one  weapon  properly 
placed  can  disrupt  10  per  cent  of*  the  total  U.  S.  refining  capacity,  three 
can  disrupt  25  percent,  and  nine  can  account  for  51  percent.  The  industry, 
then,  is  quite  vulnerable  on  a  national  basis,  both  because  of  the  inherent 
vulnerability  of  individual  refineries  and  because  they  tend  to  be  concen¬ 
trated  geographically,  particularly  near  populous  urban  areas.  Therefore, 
an  attack  directed  at  population  centers  could  automatically  bring  about  the 
loss  of  a  large  portion  of  the  national  refining  capacity  and  conversely,  a 
refinery-oriented  attack  could  entail  large  population  losses. 

2 . 2  Distribution 

The  principal  locations  of  the  world's  known  crude  oil  reserves  are 
the  United  States,  with  11  percent  of  the  supply;  the  Middle  East,  62  per 
cent;  the  U.  S.  S.R.  and  bloc,  10  percent;  South  America,  7  percent; 

Africa,  4  percent;  and  other,  6  percent.  United  States  consumption  of 
petroleum  products  is  divided  between  commercial-industrial  users,  48 
percent;  personal  (autos,  home  fuel),38  percent;  farm,  10  percent;  and 
military,  4  per  cent.  Most  U.  S.  crude  oil  is  transported  by  pipeline, 
although  the  east  coast  crude  is  entirely  ship- supplied,  with  trucks  and 
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ships  the  leading -arid  roughly  equal  -  transporters  of  refined  products. 

While  pipelines  are  not  particularly  vulnerable,  their  pumping  stations 
largely  depend  on  electricity.  Electrical  failure  will  shut  down  both  the 
stations  and  the  refineries, 

2.  3  Refinery  vulnerability 

Estimates  for  both  vulnerability  and  repair  are  based  on  calculations 
made  in  the  course  of  visiting  three  operating  U.S.  refineries,  that  are 
described  in  some  detail  in  appendix  A.  Refineries  are  the  most  vulner¬ 
able  segment  of  the  petroleum  industry,  and  the  most  vulnerable  components 
of  refineries,  as  noted,  are  the  controlhouses  and  cooling  towers.  Replace¬ 
ment  of  wooden  cooling  towers  is  relatively  easy,  but  controlhouse  repair 
is  time-consuming.  Operation  without  a  controlhouse  is  virtually  impossible 
because  refining  is  a  highly  complex,  automated  operation.  Both  practicality 
and  safety  considerations  preclude  hand  operation  of  most  processing  units 
such  as  catalytic  crackers  and  ultraformers,  although  there  is  some 
possibility  of  the  manual  operation  of  a  crude  still. 

2.3.1  Storage  tank  vulnerability 

The  significance  of  storage  units  lies  in  the  damage  caused  by 
spilled  combustible  gases  and  liquids  from  blast-ruptured  tanks  which  can 
flow  into  the  refining  area,  find  an  ignition  source,  and  burn.  Many  tank 
areas  are  diked  so  as  to  retain  contents  of  only  the  largest  tank;  if  more 
than  one  tank  ruptures,  overflow  will  result. 

Empty  cylindrical  tanks  fail  by  uplift  at  1.  5  psi;  when  full,  at 
6.5  psi.  Spherical  tanks  are  less  vulnerable,  failing  by  overturning  at 
9.0  psi. 

Tanks  and  contents  are  not  of  great  importance  in  the  refining 
operation,  which  does  not  depend  on  storage.  As  a  result  (section  3. 7. 4. 3), 
the  total  amount  of  stored  crude  oil  in  the  U.  S.  represents  approximately 
eight  days'  supply  at  current  refinery  consumption  rates,  not  a  meaningful 
postattack  reserve. 
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2.  4  Blast  damage 

The  failure  of  the  controlhouse  roof  due  to  blast  is  discussed 
above.  Blast  also  overturns  the  pipestill  at  7.5  psi,  due  to  anchor 
bolt  failure.  The  fractionator  tower  fails  at  7.0  psi,  for  the  same 
reason.  The  two  cat  crackers  analyzed  fail  at  12  and  16  psi,  and  their 
regenerators  overturn  at  7.0  and  16  psi  respectively,  Miscellaneous 
(joints  of  collapse  Include  the  deisobutanizer  tower  at  5.5  psi,  furnace 
stacks  at  6.0  psi,  maintenance  building  at  6.0  psi,  and  tower-supported 
flares  at  3.0  psi.  Collapse  of  high  structures  will  cause  great  damage 
to  equipment  beneath  and  adjacent. 

As  mentioned  previously,  blast  indirectly  causes  fire  by  rupturing 
tanks,  breaking  pipes,  and  generally  promoting  leakage  of  combustibles. 

It  should  be  noted,  therefore,  that  the  above  overpressure  figures  apply 
to  a  refinery  which  has  been  shut  down;  many  are  irrelevant  in  the  case 
of  an  operating  refinery  whose  heated,  pressurized  combustibles  could 
bring  about  total  destruction  by  fires  and  deto'  ations  when  pipes  are 
broken  and  major  units  displaced  at  5.  0  psi. 

The  methodology  for  blast  damage  calculations  involves  the  follow¬ 
ing  assumptions:  "table  top"  conditions,  front- face  orientation,  equivalent 
triangular  representation  of  the  blast  loading,  bilinear  resistance  function, 
single-degree-of-freedom  system,  and  megaton-range  weapons. 

2.  5  Fire  damage 

Fire  due  to  thermonuclear  attack  is  similar  to  a  "normal"  fire, 
except  that  fallout  may  curb  firefighting.  The  extent  of  fire  damage  is 
governed  by  the  amounts  of  fuel  in  process  and  stored,  and  by  its  volatility, 
which  depends  on  the  temperature  and  the  degree  of  refinement.  Because 
they  contain  volatile  combustibles,  the  greatest  fire  danger  exists  in  the 
operating  processing  units;  if  the  refinery  is  shut  down  and  the  units  are 
emptied  of  all  combustibles,  then  the  maximum  fire  danger  is  transferred 
to  the  storage  tanks.  Gases  in  process  that  are  heated  above  their  auto¬ 
ignition  temperatures  mil  immediately  ignite  upon  being  released  into  the 
air;  otherwise,  an  ignition  source  is  needed  and  spilled  storage  fuels  need 
not  necessarily  ignite,  particularly  if  the  refinery  is  shut  down. 
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blast-produced  metal  missiles  can  produce  incendiary  sparks,  however, 
upon  striking  other  metal.  Thermal  radiation,  preceding  blast,  is  a 
negligible  ignition  source. 

Fire  consumes  stored  luels,  can  cause  explosions  in  vessels, 
and  weakens  critical  steel  such  as  tower  supports  beyond  repair. 

While  water  cannot  extinguish  petroleum  fires,  it  is  useful  in  reducing 
metal  temperatures  to  prevent  weakening.  Other  techniques  include 
foam,  air  agitation,  and  emergency  diking  with  sand.  Firefighting 
strategy  is  generally  to  contain  the  fire,  and  let  it  burn  itself  out. 

2. 6  Shutdown 

Shutdown  can  make  the  difference  between  a  refinery  totally  des¬ 
troyed  at  5.  0  psi  and  one  still  repairable  after  a  12.  0  psi  blast.  Even 
15  minutes  warning  time  can  permit  significant  measures  while  4  hours 
permit  a  relatively  normal  shutdown  with  minimum  damage.  Proper 
pre-planning  and  personnel  training  are  essential. 

The  report  gives  two  case  histories  of  emergency  shutdowns, 
based  on  power  failure  and  fire  respectively.  In  the  former,  shutdown 
was  immediate  and  successful,  with  no  warning  time;  in  the  latter, 
slipshod  procedures  are  believed  to  have  contributed  to  major  devastation. 

2.7  Repair 

The  speed  and  effectiveness  of  postattattack  repair  of  refineries 
depend  on  the  level  of  damage,  as  well  as  the  availability  of  construction 
equipment,  replacement  parts  and  materials,  labor,  blueprints,  and 
salvageability  of  damaged  equipment.  Some  actual  case  histories  of 
construction  and  repair  projects  undertaken  at  refineries  are  given,  and 
the  repair  estimates  are  largely  based  on  these  data. 

Critical  path  scheduling  techniques  have  been  used  to  provide  a 
valuable  tool  for  planning  repair  effort.  The  most  critical  components, 
from  the  standpoint  of  lead  time,  are  turbines  and  compressors,  slide 
valves,  pressure  vessels,  and  heat  exchangers.  The  availability  of 
additional  labor  or  employment  of  crash  programs  will  not  materially 


affect  the  procurement  phase,  but  can  substantially  shorten  the  recon¬ 
struction  phase. 

Those  processing  units  most  essential,  and  the  order  in  which  they 
should  be  repaired,  will  depend  upon  minimum  postattack  fuel  require¬ 
ments.  A  typical  example  might  be:  first,  the  crude  oil  still  for  straight 
rim  gasoline,  jet,  diesel,  and  furnace  fuel;  second,  the  catalytic  cracker 
for  high  octane  gasoline  and  light  naphtha;  then  vapor  recovery  units  for 
butane  and  propane;  and  lastly,  the  alkylation  plant  for  high  octane  alkylate. 

2.  7.  1  Repair  procedures 

Refineries  should  be  rebuilt  generally  close  to  preattack 
design,  to  save  months  of  additional  repair  time  due  to  major  redesign¬ 
ing.  Field  fabrication,  substitutions,  and  cannibalization  will  be  advan¬ 
tageous.  Because  cone  roof  tanks  are  easier  to  repair  than  floating  roofs, 
they  might  replace  the  latter  for  gasoline  storage.  Gin  poles  and  cranes, 
possibly  brought  in  from  a  neighboring  refinery,  will  be  needed  for  re¬ 
erection  of  towers.  Long  lead-time  items  include  compressors,  slide 
valves,  pressure  vessels,  and  heat  exchangers. 

2.  7.2  Repair  schedules 

A  number  of  lypical  repair  schedules  are  given,  compiled 
from  detailed  damage  calculations;  they  are  scheduled  by  means  of  the 
critical  path  method  (CPM),  a  technique  widely  used  by  petroleum  industry 
designing  firms.  Labor  requirements  are  broken  down  into  12  basic 
categories.  Typical  repair  times  (assuming  no  labor  shortages)  range 
from  188  (eight  hour)  days  for  controlhouse  damage  at  1.  5  psi,  to  a 
maximum  of  2  77  calendar  days  to  repair  a  crude  still  damaged  at  7.0  psi. 

2.7.3  Generalized  repair  estimates 

Certain  generalized  conclusions  are  drawn,  based  on  repair 
data.  Techniques  for  scaling,  applicable  to  lengths  of  postattack  repair 
times,  are  briefly  outlined.  A  conclusion  involves  an  average  scaling 
exponent  of  0.  75  as  in  the  following  formula: 

0  75 

Labor  time  for  Postattack  Repair  of  A  _  Capacity  A  * 

Labor  time  for  Postattack  Repair  of  B  Capacity  B 
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This  0,  75  exponent  applies  to  high  damage  levels  and  is 
determined  by  averaging  exponents  for  individual  processing  and 
storage  units. 

2.8  Conclusions 

As  has  been  shown,  the  petroleum  industry  is  vulnerable  on  a  national 
scale,  because  nine  thermonuclear  weapons  can  severely  damage  half  of  the 
U.S.  refinery  production  for  at  least  nine  months,  even  assuming  optimum 
availability  of  parts  and  labor. 

The  refineries  are  the  weak  link  of  the  industry;  controlhouses  and 
cooling  towers  are  the  weak  links  of  the  refineries,  because  they  are 
essential  to  operation  and  fail  at  very  low  overpressures.  Other  weak 
links  are  additives  such  as  tetraethyl  lead  (TEL),  and  possibly  chemical 
inputs,  principally  f^SO^,  The  TEL  is  necessary  to  get  high  octane 
gasoline  in  appreciable  quantities,  and  there  are  only  seven  TEL  plants 
in  the  United  States.  The  chemical  industry  supplying  the  IigSO^  may  be 
vulnerable  to  attack,  although  this  has  not  been  ascertained  as  yet  and  is 
recommended  for  further  study  (see  chapter  6). 

Shutdown  can  be  accomplished  quite  rapidly,  with  damage  less  than 
the  cost  of  lost  production.  Shutdown  is  vital:  typically,  an  operating 
refinery  can  be  destroyed  by  a  5.  0  psi  blast  but,  if  shut  down,  is  still 
repairable  after  a  12  psi  blast. 

Blast  is  the  most  damaging  of  nuclear  effects,  even  at  moderate 
overpressures,  because  it  directly  affects  weak  but  essential  structures, 
and  indirectly  threatens  the  more  rugged  ones  by  creating  conditions 
under  which  ruinous  fires  can  break  out.  Fire  in  the  storage  areas,  if 
contained  by  dikes,  is  far  less  serious  than  fire  m  the  processing  areas, 
because  storage  is  not  particularly  essential  to  operation  and  because 
tanks  are  largely  interchangeable  and  are  more  easily  repaired  than 
processing  units.  Thermal  radiation  does  not  appear  to  present  any 
great  hazard,  although  it  could  possibly  serve  as  an  ignition  source  for 
vapors  emitting  from  storage  tank  vents. 
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Threshold  of  recovery  operations,  if  gasoline  is  needed  in 
quantity  without  major  repair,  require  repair  of  c.ontrolhouse  instru¬ 
mentation,  cooling  towers,  pipe  stills,  and  cat  crackers,  in  that  order. 

The  best  substitute  for  gasoline  is  liquid  petroleum  gas  (LPG), 
which  can  successfully  run  gasoline  and  diesel  engines  after  a  some¬ 
what  complicated  engine  conversion.  ** 
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3.  NUCLEAR  ATTACK  DAMAGE  ANALYSIS 


3.  1  General  refinery  vulnerability 

It  should  be  self-evident  that  the  most  vulnerable  elements  in  many 
industries  are  the  manufacturing  plants  themselves,  for  it  is  at  the  plants 
that  the  many  lines  of  inputs  —  labor,  raw  materials,  and  utilities  —  come 
together,  and  it  is  out  of  the  plants  that  the  different  products  and  many 
lines  of  distribution  radiate,  The  point  at  which  all  of  these  inputs  and  out¬ 
puts  converge  is,  in  effect,  the  industry's  bottleneck.  To  the  extent  to 
which  this  bottleneck  is  vulnerable  to  attack  — as  refineries  are  — it  is  also 
a  weak  link.  For  these  general  reasons,  the  petroleum  industry's  manu¬ 
facturing  plants  — the  refineries  —  are  also  one  of  that  industry's  most 
vulnerable  points.  Figure  3.  1  shows,  in  a  greatly  simplified  manner, 
the  pivotal  nature  of  the  refinery  in  terms  of  its  principal  inputs  and  out¬ 
puts. 

Refineries,  in  turn,  have  a  weak  link  of  their  own,  the  controlhouses, 

/ 

described  at  the  end  of  this  chapter.  Still  another  weak  link  in  the  industry 
is  the  manufacture  of  additives  such  as  tetraethyl  lead  (TEL)  and  tatramethyl 
lead  (TML),  because  there  are  only  seven  TEL,  plants  in  the  United  States, 
and  their  product  is  essential  for  production  of  adequate  amounts  of  usable 
grades  of  gasoline,  as  described  below  in  chapter  4. 

3.2  Hypothetical  nuclear  attack  pattern 

Because  petroleum  production  hinges  on  the  industry's  refineries,  the 

following  hypothetical  thermonuclear  attack  is  designed  to  be  of  optimum 

efficiency  in  destroying  the  United  States'  refining  capacity  through  attacks 

6 

on  the  288  operating  crude  refineries.  The  pattern  bears  no  relation  to 
any  other  attack  patterns,  nor  has  any  consideration  been  given  to  targets 
other  than  petroleum  refineries  in  formulating  this  pattern.  The  attack 
pattern  is  entirely  arbitrary,  solely  to  illustrate  the  vulnerability  of  the 
refining  industry. 

Based  on  calculations,  it  is  assumed  for  the  purpose  of  this  analysis 
that  a  blast  incident  overpressure  of  1.  5  psi  or  greater  is  sufficient  to  cause 
severe  damage,  resulting  in  the  refineries  being  shut  down  for  extended 
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UTILITIES 


mplified  Flow  Diagram  of  Inputs  and  Outputs 


periods.  The  reason  for  this  extensive  damage  at  a  relatively  low  blast 
overpressure  is  that  the  precast  concrete  controlhouse  roofs  will  collapse, 
with  consequent  heavy  damage  to  controls  by  secondary  missiles,  for  which 
repair  could  require  as  many  as  from  150  to  200  eight-hour  days.  In  the 
case  of  a  steel  deck  with  a  built-up  roofing,  controlhouse  collapse  can  come 
at  an  even  lower  overpressure,  at  from  1.  0  to  1.  5  psi.  A  weapon  yield  of 
1  MT  at  optimum  burst  height  is  used  in  the  hypothetical  attack  pattern  be¬ 
cause  this  gives  a  circle  of  about  10  miles  radius  within  which  the  over¬ 
pressure  is  1,5  psi  or  greater.  The  overpressure  duration  makes  little 
difference  in  this  case  (see  appendix  D), 

3.  2.  1  Methodology 

The  geographic  locations  of  the  2  88  operating  refineries  are 
plotted  on  a  map  of  the  United  States,  and  circles  with  10- mile  radii  are 
then  drawn  on  the  map,  to  include  as  much  refining  capacity  as  possible 
within  each  circle,  without  overlapping,,  until  each  of  the  refineries  plotted 
is  so  enclosed.  This  results  in  163  circles,  containing  from  one  to  thirteen 
refineries  each.  The  refining  capacities  within  the  circles  naturally  vary 
widely.  The  greatest  capacity  in  any  circle  is  in  Port  Arthur,  Texas; 
1,017,500  b/cd  produced  by  six  refineries.  The  smallest  is  200  b/cd 
produced  by  one  refinery  in  Lusk,  Wyoming. 

The  groups  or  circles  are  listed  in  order  of  decreasing 
refining  capacity  in  table  3. 1,  which  likewise  details  the  refining  capacity 
that  would  be  destroyed  by  each  of  163  weapons  of  1  MT  each,  on  a  weapon- 
by- weapon  cumulative  basis. 

3.2.2  Findings 

The  petroleum  refining  capacity  in  the  United  States  has  only 
a  few  significant  groups  of  closely  spaced  refineries,  but  these  large  con¬ 
centrations  must  be  considered  because  a  few  1  MT  weapons,  carefully 
placed,  wall  seriously  damage  or  destroy  a  high  percentage  of  the  national 
refining  capacity.  To  illustrate  the  vulnerability  of  these  concentrations, 
one  weapon  placed  strategically  at  Port  Arthur,  Texas,  could  seriously 
damage  approximately  10  percent  of  the  industry's  capacity.  Three 
weapons  carefully  placed  could  seriously  damage  25  percent,  and  nine 
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weapons  51  percent,  of  total  capacity.  Beyond  this,  however,  the  additional 
damage  per  weapon  declines  rapidly: 

25  weapons  seriously  damage  74  %  of  capacity 

50  weapons  seriously  damage  88  %  of  capacity 

75  weapons  seriously  damage  94  %  of  capacity 

100  weapons  seriously  damage  97  %  of  capacity 

125  weapons  seriously  damage  99.1%  of  capacity 
150  weapons  seriously  damage  99.8%  of  capacity 
163  weapons  seriously  damage  100.0%  of  capacity 

In  fact,  it  requires  over  40  weapons  to  seriously  damage  the  final  1  percent, 
as  may  be  seen  in  table  3.1. 

Two-thirds  of  the  weapons  account  for  the  destruction  of  only 
a  single  refinery  per  weapon.  These  are  generally,  but  not  always,  the 
smaller  refineries  in  remote  locations.  A  significant  exception  is  the  Baton 
Rouge  refinery  of  Humble  Oil  &  Refining  Company,  with  3.3  percent  of  the 
U.  S.  capacity,  and  the  only  refinery  destroyed  by  weapon  number  eight. 

These  results  have  been  plotted  in  the  graphs  of  figures  3.  2 
and  3.  3,  and  illustrated  in  the  map  of  figure  3.4.  It  is  significant  that  a 
majority  of  the  ten  most  destructive  attacks  occur  in  or  near  large  cities 
and  population  centers,  Los  Angeles,  San  Francisco,  Houston,  St.  Louis, 
Chicago,  Philadelphia,  and  New  York.  This  means  that  considerable  damage 
to  population,  industry,  and  transportation  would  occur  along  with  the 
destruction  of  these  refineries  located  in  these  areas.  Conversely,  an 
attack  directed  in  part  or  whole  against  population  centers  would  in  all 
probability  result  in  the  loss  of  a  very  high  percentage  of  petroleum  refining 
capacity. 

3.3  Geographical  locations 

There  are  four  areas  with  concentrations  of  refining  capacity, 

California,  Texas-Louisiana,  Chicago-Midwest,  and  the  Middle  Atlantic 
States.  Their  combined  capacity  represents  69  percent  of  the  United  States 
total  capacity,  and  the  Texas-Louisiana  area  alone  accounts  for  33  percent 
of  the  national  capacity,  as  shown  in  table  3.2,  The  large  refineries  — those 
of  over  100,000  b/cd  capacity  — are  identified  by  owner  and  location  in  table  4.1. 
in  the  discussion  of  repair  in  the  following  chapter.  As  noted  earlier,  this 
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Table  3.  1  REFINERY  CAPACITIES  LOST  BY  1  MT  WEAPONS 


Weapon 

Order 

Target  No.  of 

Location  Refineries 

Refinery 

Capacity 

Losses 

b/cd 

Total 

Accumu¬ 

lated 

Losses 

b/cd 

Percent  of 

National 

Capacity 

1 

Texas,  Port  Arthur 

6 

1,017,  500 

1,017,  500 

10 

2 

California,  Los  Angeles 

13 

776, 140 

1,  793, 640 

17.5 

3 

Pennsylvania,  Philadelphia 

6 

752, 000 

2,  545,640 

25.0 

4 

Texas,  Houston 

7 

733,  250 

3,  278,890 

32.2 

r. 

Indiana,  Whiting 

7 

477,  700 

3,  756, 590 

36.  7 

6 

California,  San  Francisco 

4 

428,000 

4,  184,590 

41,0 

7 

New  Jersey,  Linden 

6 

397,  550 

4,  582,  140 

45,0 

8 

Louisiana,  Baton  Rouge 

1  : 

365,000 

4,  947,  140 

48.3 

9 

Illinois,  E.  St.  Louis 

4 

340, 500 

5,  287,640 

51.5 

10 

Texas,  Texas  City 

3 

254, 350 

5,541,  990 

54.0 

11 

Louisiana,  Lake  Charles 

2 

240,  000 

5,  781,  990 

56.5 

12 

Texas,  Corpus  Christi 

6 

227, 250 

6,  009,240 

58.  5 

13 

Ohio,  Toledo 

4 

226, 950 

6,236,  190 

61.0 

14 

Delaware,  Delaware  City 

1 

140, 000 

6,376,190 

62. 1 

15 

Missouri,  Kansas  City 

2 

135, 000 

6, 511, 190 

63.5 

16 

Oklahoma,  Tulsa 

2 

126, 000 

6,637,190 

65.0 

17 

Illinois,  Robinson 

2 

125, 800 

6, 762, 990 

66.0 

18 

Illinois,  Lockport 

2 

125,  000 

6,  887,  990 

67.0 

19 

Louisiana,  Norco 

1 

116,  000 

7,  003,  990 

68.  3 

20 

Washington,  Anacortes 

2 

1.13,  500 

7,  117,  490 

69.5 

21 

Oklahoma,  Ponca  City 

2 

110, 000 

7/227,490 

70.5 

22 

Utah,  Salt  Lake  City 

4 

O 

O 

O 

7,  328,240 

71.5 

23 

Mississippi,  Pascagoula 

1 

100,  000 

7,  428,  240 

72.5 

24 

Montana,  Billin  3s 

3 

95,  500 

7,  523,  740 

73.5 

25 

Texas,  Sweeny 

1 

95, 000 

7,  618,  740 

74.  3 

26 

California,  Bakersfield 

8 

91, 750 

7,- 710,  490 

75.2 

27 

Texas,  El  Paso 

2 

91, 000 

7,801,490 

76.0 

28 

Michigan,  Detroit 

4 

88,  880 

7,  890,  370 

77.0 

29 

Texas,  Borger 

1 

85, 000 

7,  975,  370 

77.8 

30 

Kansas,  El  Dorado 

3 

81, 900 

8,  057,  270 

78.0 

31 

Minnesota.  St.  Paul 

3 

O 

O 

OO 

00 

8,  139,070 

79.3 

\ 

32 

Arkansas,  El  Dorado 

4 

81,  700 

8,  220,  770 

79.  9 

33 

Kentucky,  Catiettsburg 

1 

75,  000 

8,  295,  770 

80.9 
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REFINERY  CAPACITIES  LOST  BY  1  MT  WEAPONS 


V'eapon  Target 

Order  Location 

No.  of 
Refineries 

Refinery 

Capacity 

Losses 

b/cd 

Total 

Accumu¬ 

lated 

Losses 

b/cd 

Percent  of 

National 

Capacity 

34 

Louisiana,  Chalmette 

2 

70,  000 

8,  365,  770 

81.3 

35 

Kansas,  Wichita 

2 

66,  500 

8,  432,  270 

82.0 

36 

New  York,  Buffalo  1 

C1,D00 

8, 494, 170 

82.8 

37 

Wyoming,  Casper 

3 

61, 300 

8,  555, 470 

83.  3 

38 

Ohio,  Cleveland 

1 

56,000 

8,611, 470 

83.8 

39 

Ohio,  Cincinnati 

2 

51, 500 

8,  662,  970 

84.  2 

40 

Ohio,  Lima 

i 

48, 000 

8,  710,  970 

84.  8 

41 

Illinois,  Pana 

i 

.  47,000 

8,  757,  970 

85.  3 

42 

Oklahoma,  Duncan 

i 

44,  000 

8,  801,  970 

35  3 

43 

North  Dakota,  Mandan 

i 

42, 500 

8,  844,  47G 

86.2 

44 

Washington,  Ferndale 

i 

39,000 

8,883,  470 

86.  5 

45 

Colorado,  Denver 

4 

38,200 

8,  921, 670 

86.  3 

46 

Virginia,  Yorktown 

1 

38,000 

8,  959,  670 

87.2 

47 

Hawaii,  Honolulu 

1 

35,000 

8,994,  670 

88.  0 

48 

Ohio,  Canton 

1 

34,000 

9,028,  670 

88.  8 

49 

Kansas,  Chanute 

2 

33,450 

9,  062,  120 

88.2 

50 

Oklahoma,  Enid 

1 

31,680 

9,093,  800 

88.4 

51 

Kansas,  McPherson 

1 

31,000 

9, 124, 800 

88.  7 

52 

Texas,  Big  Spring 

1 

29,600 

9,  154,  400 

89.2 

53 

Maryland,  Baltimore 

3 

28, 900 

9, 183, 300 

89.  4 

54 

Michigan,  Alma 

3 

27,  750 

9,211, 050 

89.  6 

55 

Texas,  Sunray 

1 

27,  500 

9,238,  500 

89.  9 

56 

California,  Santa  Maria 

2 

26,  000 

9,264,  550 

90.  2 

57 

Kansas,  Arkansas  City 

1 

25, 000 

9,289,  550 

9C.4 

58 

Kansas,  Coffeyville 

1 

24, 500 

9, 314, 050 

90.  6 

59 

Wyoming,  Sinclair 

1 

24, 000 

9,  338, 050 

90.  8 

60 

Ohio,  Newark 

1 

24, 000 

9,  352, 050 

91. 0 

61 

Oklahoma,  Wynnewood 

1 

24,  000 

9,  386, 050 

SI.  3 

62 

Texas,  Tyler 

1 

24,000 

9,  410, 050 

91.  5 

63 

Oklahoma,  Admore 

1 

23,  750 

9,  433,  800 

91.  8 

64 

Michigan,  Muskegon 

2 

23,  300 

9,  457,  100 

92.  0 

65 

Indiana,  Rock  Island 

1 

22,  000 

9,  479,  100 

92.  3 

66 

Michigan,  Bay  City 

1 

22,  000 

9, 501, 100 

92.  5 
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T ;.!>!<•  3 . 1  REFINERY  CAPACITIES  LOST  BY  1  MT  WEAPONS 


Wo  apor 
Order 

i  Target  No,  of 

Location  Refineries 

Refinery 

Capacity 

Losses 

b/cd 

Total 

Accurnu* 

lated 

Losses 

b/cd 

Percent  of 

National 

Capacity 

67 

Texas,  Odessa 

1 

21, 500 

9,  522,  600 

92.  8 

G8 

Oklahoma,  Cushing 

2 

20, 640 

9,  543,  240 

93,  0 

69 

Pennsylvania,  Warren 

2 

20,600 

9,  563,  840 

03.2 

70 

Wyoming,  Cheyenne 

1 

20,500 

9, 584, 340 

93.4 

71 

Tennessee,  Memphis 

1 

20, 300 

9,604,640 

93.6 

72 

Alaska,  Nikiski 

1 

20,000 

9,624,640 

93.8 

73 

Wisconsin,  Superior 

1 

20,000 

9,  644,640 

94.0 

74 

Louisiana,  Shreveport 

2 

19,  400 

9,  664,040 

94.  2 

75 

Kentucky,  Louisville 

1 

19, 000 

9,  683,  040 

94.  4 

76 

Texas,  Mt.  Pleasant 

1 

19, 000 

9,  702, 040 

94.  5 

77 

Texas,  Amarillo 

1 

19,000 

9,  721,040 

94.  7 

78 

Oklahoma,  Okmulgee 

1 

19,000 

9,  740, 040 

94.  9 

79 

Mississippi,  Purvis 

1 

18, 600 

9,  758,  640 

95.  0 

80 

Minnesota,  Wrenshall 

1 

16, 000 

9,  774,640 

95.2 

81 

New  Mexico,  Artesia 

1 

15.500 

9.  790,140 

95.  3 

82 

Ohio,  Findlay 

1 

15, 000 

9,  805,  140 

95.  7 

83 

Rhode  Island,  Providence 

2 

14,  500 

9,  819, 640 

95.9 

84 

Pennsylvania,  Franklin 

3 

13, 950 

9,  833,  590 

96.0 

85 

Kansas,  Phillipsburg 

* 

X 

13,  000 

9,  346,  590 

96.2 

86 

Washington,  Tacoma 

1 

12,  500 

9,  859,  090 

96.  3 

87 

Texas,  Colorado  City 

1 

12, 500 

9,  871,  590 

96.4 

88 

Indiana,  Mt.  Vernon 

1 

12, 200 

9,  883,  790 

96.  5 

89 

Oklahoma,  Cyril 

1 

12,  000 

9,  895,  790 

96.6 

90 

Alabama,  Tuscaloosa 

2 

10,  770 

9,  906,  560 

96.8 

91 

New  Mexico,  Ciniza 

1 

10, 700 

9,  917,  260 

96.  9 

92 

Texas,  Ft.  Worth 

2 

10,  500 

9,  927,  760 

33 

Massachusetts,  Everett 

1 

10,  000 

9,  937,  760 

97.0 

94 

California,  Hanford 

1 

■  10, 000 

9,  947,  760 

97.  1 

95 

California,  Oxnard 

3 

9,  625 

9,  957,  385 

97.2 

96 

Texas,  Wichita  Falls 

1 

9,  500 

9,  966,  885 

97.  3 

97 

Texas,  Pettus 

1 

9,  500 

9,  976,  385 

97.4 

98 

Wyoming,  Cody 

1 

8,  500 

9,  984,  885 

97.  5 
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REFINERY  CAPACITIES  LOST  BY  1  MT  WEAPONS 


We  apon 

Order 

Target  N'o.  of 

Location  Refineries 

Refinery 

Capacity 

Losses 

b/cd 

Total 

Accumu¬ 

lated 

Losses 

b/cd 

Percent  of 

National 

Capacity 

D9 

Texas,  San  Antonio 

3 

8,  125 

n,  nnd,  oio 

100 

South  Carolina,  Charleston 

1 

8,  000 

10, 001,  010 

97,  6 

101 

Texas,  Winnie 

1 

7,  600 

10, OOH,  610 

97.  7 

102 

Wyoming,  Newcastle 

1 

7,  500 

10,016,  110 

103 

Montana,  Cut  Bank 

3 

7,  200 

10,  023,  310 

97.8 

104 

Washington,  Richmond  Beach 

2 

7,  200 

10, 030,  510 

27.9 

105 

Georgia,  Savannah 

1 

G,  600 

10,037,  110 

98.  0 

106 

Oregon,  Portland 

i 

.  6, 400 

10,  043,  510 

107 

Michigan,  Carson  City 

1 

6,  200 

10,  04P,  710 

98.  1 

108 

Alabama,  Mobile 

1 

6,  000 

10,  055,  710 

109v 

Mississippi,  Sandersville 

1 

5,  800 

10, 061, 510 

98,  2 

110 

Texas,  Abilene 

2 

5,  730 

10.  067,  240 

98.  3 

111 

Kansas,  Shallow  Water 

1 

5,  700 

10, 072, 040 

112 

Pennsylvania,  Freedom 

1 

5,  500 

10,078,  440 

98.4 

113 

Illinois,  Pana 

1 

5,000 

10, 083, 440 

98.  5 

114 

Michigan,  West  Branch 

1 

5,000 

10,088,  449 

115 

Wyoming,  Thermopolis 

1 

5,000 

10,003,  440 

98.6 

116 

Texas,  Edinburg 

3 

4,855 

10.  098,  205 

117 

Louisiana,  Cotton  Valley 

1 

4,  750 

10,  103,  045 

98.  7 

ns 

California,  Huntington  Beach 

1 

4,  750 

10,  107,  795 

119 

Wisconsin,  Sheboygan 

1 

4,  700 

10, 112. 495 

98.  8 

120 

Montana.  Great  Falls 

1 

4.  500 

10,  116,  995 

98.9 

121 

Indiana,  Laketon 

1  . 

4,  500 

10, 121,  495 

122 

Indiana,  Princeton 

1 

4,  500 

10,  125,  095 

99.0 

123 

Michigan,  Kalamazoo 

1 

4,275 

10,  130,  270 

124 

West  Virginia,  Falling  Rock 

1 

4,200 

10,  134,  470 

99. 1 

125 

Pennsylvania, Fhrmero  Valley 

1 

4,000 

10,  138,  470 

126 

Oklahoma,  Stroud 

1 

4,000 

10,  142,  470 

99.2 

127 

Pennsylvania.  Farm  City 

2 

3,890 

10£  146,  360 

128 

Delaware,  Claymont 

1 

3.  500 

10,  149,  860 

99.  3 

129 

Texas,  Brownsville 

1 

3,400' 

10, 153, 260 

130 

Texas,  Longview 

1 

+ 

3,400 

10,  156,  660 

Table  3.1  REFINERY  CAPACITIES  LOST  BY  1  MT  WEAPONS 


Weapon 

Order 

i  Target  No,  of 

Location  Refineries 

Refinery 
Capacity 
Losses 
b/ cd 

Total 

Accumu¬ 

lated 

Losses 

b/cd 

Percent  of 
National 

/'l 

California,  Newhall 

1 

3,400 

10,  160,  060 

3,:.  2 

Arkansas,  Waterloo 

2 

3,  300 

10,  1  63,  360 

99.  4 

■13 

New  Mexico,  Bloomfield 

2 

3,150 

10,  166,  310 

*  J4 

Florida,  St.  Marks 

1 

2,950 

10,  160,460 

135 

Indiana,  Ft.  Wayne 

1 

2,850 

10,  172,  310 

136 

Montana,  Wolf  Point 

1 

2,850 

10,  175,  160 

99.  5 

137 

Nebraska,  Scotts  Bluff 

1 

2,300 

10,  177,  960 

138 

West  Virginia,  St.  Marys 

1  .  . 

.2,650 

10,  180,  610 

139 

Texas,  Carrizo  Springs 

1 

2,  500 

10,  183,  110 

99.6 

140 

Mississippi,  Yazoo  City 

1 

2,500 

10,  185,  610 

141 

Michigan,  Reed  City 

1 

2,500 

10,  188,  110 

142 

P4orth  Dakota,  Williston 

1 

2,  400 

10,  190,  510 

143 

Louisiana,  Jennings 

1 

2,  375 

10,  192,885 

99.  7 

144 

Alabama,  Cordova 

1 

2,200 

10,  195,  085 

145 

Illinois,  Colmar 

2 

2,200 

10,  197,  285 

146 

Georgia,  Douglas  ville 

1 

2,000 

10,  199,  285 

147 

Alabama,  Moundville 

1 

2,000 

10,  201, 285 

148 

Texas,  Bryson 

1 

2,000 

10,  203,  285 

149 

Texas,  Waskom 

1 

2,000 

10,205,285 

150 

Texas,  Gainesville 

1 

1,900 

10,  207,  185 

99.8 

151 

Louisiana,  Church  Point 

1 

1,700 

10,  208,  885 

152 

New  Mexico,  Monument 

1 

1,675 

10, 210, 560 

153 

Colorado,  Rangely 

1 

1,  500 

10.  212,060 

154 

Texas,  Three  Rivers 

1 

1,500 

10,  213,  560 

155 

Kentucky,  Somerset 

1 

1,425 

10,  214,  985 

39.9 

156 

Indiana,  Troy 

1 

1,  425 

10,  216,  410 

157 

Louisiana,  Ida 

2 

1,400 

IP, 217, 810 

158 

Texas,  Tucker 

1 

1,000 

10, 218, 810 

159 

Montana,  Kalis  pell 

1 

•  1,000 

10, 219, 810 

160 

Montana,  Chinook 

1 

1,000 

10,  220,  810 

161 

Montana,  Mosby 

1 

1,000 

10,  221,810 

162 

Colorado,  Alamosa 

1 

715 

10, 222, 525 

163 

Wyoming,  Lusk 

1 

200 

10,  222,  725 

100% 
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Figure  3.2  Effects  of  Nuclear  Weapons  on  Refineries 
National  Production  Capacity  Losses 


Figure  3.3  Effects  of  Nuclear  Weapons  on  Refineries 
The  Ten  Most  Destructive  Weapons 


tendency  toward  geographical  concentration  not  only  accentuates  vulner¬ 
ability,  but  also  assumes  even  more  serious  proportions  because  the  big 
refineries  are  usually  found  in  or  near  large  population  targets.  Because 
of  the  economy  of  water  transportation,  refineries  are  usually  located  on 
the  coasts,  Great  Lakes,  and  rivers,  which  raises  the  possibility  of  vulner¬ 
ability  of  coastal  installations  to  tsunamis.  Table  3.  3  gives  the  numbers 
of  refineries,  and  their  capacities  by  states,  and  table  3.4  lists  the. refining 
companies  with  capacities  exceeding  100,000  b/d. 

Oil  fields  are  reasonably  dispersed  and  not  particularly  vulnerable. 
Newer  wells  are  under  pressure,  and  blowout  could  result  from  attack, 
causing  extensive  local  damage  and  fire,  but  having  little  effect  on  the 
overall  supply.  There  are  almost  600,000  producing  oi)  wells  scattered 
throughout  31  of  the  states,  as  shown  in  table  3.5. 

Although  offshore  drilling  activity  has  been  increasing  in  recent  years, 

and  its  share  of  the  total  at  present  is  still  relatively  small,  it  does  indicate 

a  trend,  and  in  years  to  come  this  may  very  well  be  the  major  source  of 

crude  oil.  In  1962,  California's  offshore  wells  produced  only  8  percent 

12 

of  that  state's  total  of  296.6  million  barrels.  In  Louisiana,  however, 
offshore  production  is  18  percent  of  the  tota1,11  and  the  proposed  construction 
of  the  Red  Snapper  pipeline  in  the  Louisiana  offshore  field  by  1967,  can  be 
expected  to  boost  this  still  further.  As  of  June,  1964,  there  were  90  wells 
capable  of  producing  in  offshore  Louisiana,  though  many  of  these  were 
"shut  in"  (capped).  ^ 

3,  4  Crude  oil  reserves,  sources,  and  classifications  of  products 

With  the  possible  exception  of  some  experimental  processing  of  coal 

into  gasoline  by  the  U.  S.  Bureau  of  Mines,  ^  petroleum  products  are  all 

derived  from  gas  and  crude  oil.  The  estimated  world  crude  oil  reserves 

15 

in  1962  were  as  follows: 


U.S.A. 

11% 

Middle  East 

62% 

U.  S.S.  R.  and  Satellites 

10% 

South  America 

7% 

Africa 

4% 

O  tiier 

6% 
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Table  3.2 

NUMBER  OF  REFINERIES  WITH  OVER  10,000  Hi  CD  CAPACITY 
AND  TOTAL  CAPACITY  BY  AREAS  6 


Area 

Number 

of 

refineries 

Total 

crude 

capacity 

Percentage 

of 

(i.  S.  total 

California 

19 

1,272,265 

12% 

Te  xas  -  Louisiana 

38 

2,644,950 

33% 

Chicago-  Midwest 

15 

1,093,300 

11% 

Middle  Atlantic 

1 5 

1,295,250 

13% 

Other  Areas 

31% 

Total 

100% 

Table  3.3 


NUMBER  AND  CAPACITY  OF  REFINERIES,  BY  STATES,  JANUARY  1,  1964 


States 

— 

No.  of  refineries 

Crude  capacity  b/cd 

Alabama 

5 

20, 970 

Alaska 

1 

20, COO 

Arkansas 

0 

85, 000 

California 

33 

1, 349, 665 

Colorado 

6 

40,  415 

Delaware 

O 

w 

143, 500 

FloridEi 

1 

2,  950 

Georgia 

8,  600 

Hawaii 

1 

35,  000 

Illinois 

13 

634, 000 

Indiana 

12 

489,  775 

Kansas 

13 

351, 050 

Kentucky 

3 

95, 425 

Louisiana 

14 

820, 625 

Maryland 

3 

28,  900 

Massachusetts 

1 

10,  000 

Michigan 

14 

179,  905 

Minnesota 

4 

97,  800 

Mississippi 

4 

126, 900 

Missouri 

1 

65,  000 

Montana 

11 

113,050 

Nebraska 

1 

2,  800 

New  Jersey 

7 

529,250 

New  Mexico 

5 

31,025 

New  York 

3 

89, 200 

North  Dakota 

2 

44, 900 

Ohio 

11 

455, 450 

Oklahoma 

13 

415, 070 

Oregon 

1 

6,  400 

Pennsylvania 

13 

640, 940 

Rhode  Island 

2 

14, 500 

South  Carolina 

1 

8,  000 

Tennessee 

1 

20, 300 

Texas 

54 

2, 730, 210 

Utah 

4 

100, 750 

Virginia 

1 

38, 000 

Washington 

6 

172,  200 

West  Virginia 

2 

6,  850 

Wisconsin 

2 

24, 700 

Wyoming 

9 

127,  000 

Total 

288 

10, 176, 075 

Table  3.  4 


REFINERS  WITH  OVER  100,000  B/D  CAPACITY,  JANUARY  1,  1964 


Refineries  Number 


1.  Humble 

s 

2.  Texaco 

13 

3.  Standard  (Calif. ) 

14 

4.  American 

12 

5.  Mobil 

12 

6 .  Shell 

6 

7.  Gulf 

6 

8.  Sinclair 

5 

9.  Cities  Service 

4 

10.  Phillips 

6 

11.  Tidewater 

2 

12.  Continental 

9 

13.  Sun 

2 

14.  Atlantic 

2 

15.  Pure 

<i 

16.  Union 

6 

1 7 .  Sunray 

3 

18.  Ashland 

6 

19.  Richfield 

1 

20.  Standard  of  Ohio 

3 

°3.  Marathon 

4 

22.  Hess 

2 

Total 


130 


Table  3.  5 


CRUDE  OIL  PRODUCTION  AND 
NUMBER  OF  PRODUCING  OIL  WELLS,  B T  STATES 


Tnousands 


State 


of 

barrels 


Alabama 

Alaska 

A  rizona 

Arkansas 

California 

Colorado 

Florida 

Illinois 

Indiana 

Kansas 

Kentucky 

Louisiana: 

Gulf  Coast 
Northern 
Total 

Michigan 

Mississippi 

Missouri 

Montana 

Nebraska 

Nevada 

New  Mexico 

New  York 

North  Dakota 

Ohio 

Oklahoma 
Pennsylvania 
South  Dakota 
Tennessee 
Texas : 

Gulf  Coast 
East  Texas 
West  Texas 
Rest  of  State 
Total 


7,  183 
10,2  60 
43 

27.585 

296,572 

42,460 

418 

77,325 

11,709 

112,076 

18,122 


483,101 

17,117 

54,471 

108 

31,648 

24,850 

137 

108,708 

1,789 

25,164 

5,066 

198,563 

5,225 

170 

18 


936,508 


Utah 
Virginia 
West  Virginia 
Wyoming 


30,964 

3 

3,345 

.145,167 


1062  12 


Number  of  Weils 
as  of 

December  31 


449 

52 

4 

5,918 

39,265 

2,110 

11 

30,17  4 
5,607 
46,750 
19,448 

13,813 

12.569 

26,382 

4,282 

2,5.60 

105 

3,692 

1,764 

4 

16,102 

13,537 

1,794 

16,867 

80,799 

59,673 

12 

40 

19,491 

19,424 

65,236 

93,508 

197,659 

So2 

5 

12,880 

__7,581_ 


U.S.  Total 


2,676,185 


596,385 


The  United  States  sources  of  crude,  for  1962,  were  2.7  billion 

1 1 

barrels  from  domestic  production,  and  0,4  billion  barrels  imported, 
imports  of  foreign  oil  are  limited  by  the  import  control  program  which 
became  effective  in  March,  1959. 

Crudes  are  generally  classified  either  "sweet"  or  "sour",  depending 

on  hydrogen  sulfide  (R„S)  content.  When  dissolved  H-S  content  exceeds 

1  z  19 

U,  05  cu.  ft.  per  100  gallons  of  oil,  the  oil  is  considered  sour.  The  oils 

from  West  Texas,  New  Mexico,  and  some  fields  of  Kansas,  Wyoming, 

Arkansas,  and  the  Middle  East,  ar  *  sour  oils,  but  most  of  the  crude  runs 

to  refineries  in  the  United  States  are  sweet.  Sour  oils  generally  present 

three  problems. 

1)  Their  corrosive  action  requires  that  refining  equipment  be 
constructed  of  special  corrosion- resistant  alloy  steels.  A 
refinery  designed  to  handle  only  sweet  crude  would  be 
seriously  damaged  by  corrosion  from  a  sour  crude  after 
about  six  months  of  operation, 

2)  The  toxicity  of  HgS  makes  its  presence  in  the  free  state 
a  hazard. 

3)  The  presence  of  sulfur  in  gasolines  greatly  affects  their 
lead  susceptibility  and  therefore  their  ability  to  be  raised 
in  octane  number  by  tetraethyl  lead  antiknock  additives. 

Sweetening  treatments  are  widely  used  to  convert  and  treat  refined 
products  to  modify  objectionable  compounds  and  various  other  undesirable 
impurities.  A  "sour"  refinery  could  handle  a  sweet  crude  without  difficulty, 
but  a  "sweet"  refinery  would  be  susceptible  to  appreciable  corrosion  damage 
if  required  to  process  "sour"  crude. 

3.  5  Major  users  of  petroleum  products 

There  are  four  major  U.  S.  consuming  sectors,  or  markets,  for 
petroleum  products :  personal,  commercial-industrial,  agriculture,  and 
government-military.  Personal  consumption, consisting  chiefly  of  gasoline, 
motor  lubes,  and  home  fuel  oil,  accounts  for  about  38  percent  of  Unitea 
States  consumption.  The  commercial-industrial  area  accounts  for  almost 
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or-e- half,  48  percent,  and  includes  land,  air,  marine  public  transportation, 
Public  utilities,  mining,  and  manufacturing.  The  farm  market  takes  10  per 
cent,  and  the  balance,  3.  5  percent,  goes  to  the  government-military  market.113 
In  toe  event  of  a  postattack  fuel  shortage,  it  is  a  reasonable  assumption  that 
the  persona^  market  would  be  the  first  to  have  its  consumption  restricted. 
Postattack  petroleum  demand  and  restrictions  of  petroleum  supplies  are 
speculative  questions  at  best,  and  depend  upon  specific  scenarios,  including 
attack  patterns.  For  this  reason,  these  questions  presently  lie  beyond  the 
scope  of  this  study. 

3,8  Distribution  of  crude  and  refined  products 

Crude  oil  within  the  U.  S.  is  principally  transported  by  pipelines,  and 
trucks  and  ships  are  the  leading  carriers  of  refined  products,  as  shown  in 
table  3,  6,  which  summarizes  the  relative  importance  of  the  various  means 
of  transportation.  The  trend  toward  pipelines  received  its  impetus  in  the 
construction  of  the  "Big  Inch"  and  "Little  Big  Inch"  lines,  during  World 
War  II,  as  a  countermeasure  against  U-boat  attacks  on  tankers.  Since 
then,  pipeline  use  lias  increased  rapidly;  for  example,  in  the  1951-61  decade, 
tlie  capacity  for  products  grew  by  232  percent,  and  for  crude  oil,  51  percent.17 

Crude  oil  pipelines  run  from  oil  producing  areas  to  refineries,  and 
the  majority  of  U.  S.  refineries  depend  on  them.  Most  of  their  pumps  use 
diesel  drives,  whereas  product  lines  generally  use  electric,  motor  drives. 

Other  types  of  drives  used  are  natural  gas  and  gas  turbine.  1  ‘  In  1961, 

there  were  3,588  pumping  units  in  1,169  crude  pumping  stations,  of  which 

233  were  standby.  For  product  pumping  stations,  in  1361,  there  were  606 

pumping  stations  with  1,519  pumping  units,  of  which  91  were  standby.  17 

Pumping  stations  are  generally  in  rural  areas  not  likely  to  be  near  targets. 

Their  dependence  on  electricity,  however,  means  that  a  power  failure  would 

interrupt  the  flow,  and  in  addition,  such  a  power  failure  would  also  shut  down 
2 

many  refineries. 

Pipelines  are  not  vulnerable  because  they  are  buried  and  well  dispersed, 
although  for  many  refineries  cutting  one  or  two  key  pipelines  would  cause  shut¬ 
down.  Tank  trucks,  tank  cars,  ships,  and  natural  gas  pipelines,  if  modified. 
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Table  3.  8 


TOTAL  CRUI.U:  OIL  AND  1UTV-INKD  PRODUCTS  TRANSPORTED  IN  U.  »  , 
BY  METHOD  OK .TRANSPORTATION.  1361 12 


Method 

of 

Transportation. 

...  ;  — * - - - “*i 

t'rude  OR 

Refined  Products 

Thousand 

tons 

Percent 
of  total 

Thousand  j 

tons 

P« rcent 
of  total 

"  1 

| 

Pipelines 

333,3  U) 

75.o 

150,8  52 

22.5  . 

Water  Carriers 

.78,207 

■  17.5 

244, -100 

37.0 

Trucks 

28, 177 

6.5 

245,441 

.  36.5 

Railroads 

2,021 

c*e  • 

27.937 

4,0 

T  otal 

441,820 

100 

663,630 

too 

present  alternate  forms  of  transportation.  River  crossings  are  generally 

on  river  bottoms  and  are  therefore  not  vulnerable.  Of  742  crude  pipeline 

river  crossings,  in  1061,  only  70  were  overhead,  and  of  813  product  pipe- 

1 7 

line  river  crossings,  only  54  were  overhead. 

Interchangeability  between  product  lines  and  crude  lines  is  fairly 
easy  to  accomplish,  providing  the  flow  rate  is  not  critical  and  something 
can  be  run  through  the  crude  line  to  clear,  it  out  when  switching  from  crude 
to  refined  products.  For  example,  after  the  war  the  "Little  Big  Inch"  was 
converted  to  natural  gas  transmission,  and  still  later  was  converted  to  a 
product  line,  in  which  capacity  it  currently  serves  between  Baytown,  Texas, 
and  Lebanon,  Ohio,  Product  lines  can  also  be  converted  to  natural  gas 
pipelines  if  modifications  are  made.  On  the  east  coast,  for  instance, 
refineries  receive  their  crude  oil  by  ship,  and  if  this  were  lost  by  damage 
to  shipping  or  port  facilities  it  might  be  necessary  to  convert  a  natural  gas 
transmission  line  to  crude  service. 

3.7  Vulne  r  ability 

3.7.1  General 

The  method  of  analyzing  a  structure  subject  to  blast  loading 
follows  the  procedure  outlined  in  the  "Professional  Guide  on  Reducing  the 
Vulnerability  of  Industrial  Plants  to  the  Effects  of  Nuclear  Weapons",  pre¬ 
pared  by  Advance  Research  for  the  Office  of  Civil  Defense.  The  sequence 
of  operations  in  the  analysis  by  this  method  is  given  in  figure  3.  18  of 
section  3.  11,  and  is  described  in  detail  in  reference  69. 

However,  for  those  familiar  with  the  state  of  the  art,  the  basic 
methodology  involves  the  following  assumptions: 

a)  "Table  Top"  conditions 

Topography  is  considered  to  be  flat  which  gives 
ideal  conditions  consisting  of  a  smooth,  plane, 
rigid  surface. 

b)  Front  Face  oriej  ation 

Structures  and  their  components  are  analyzed  for 
their  most  critical  orientation  to  a  blast  without 
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regard  to  the  orientation  of  other  structures 
which  may  be  in  the  immediate  vicinity. 

c)  Equivalent  Triangular  representation 

In  order  to  use  overpressure-time  curves 
in  computations  of  structural  response  to 
blast  loading,  triangular  representations 
equivalent  to  the  actual  overpressure-time 
functions  are  used. 

d)  Bilinear  Resistance  function 

The  resistance  function  is  assumed  to  have 
an  ideal  elasto-plastic  relation,  i.e.,  the 
resistance  of  the  elements  remains  constant 
after  the  material  reaches  the  yield  point. 

e)  Single -Degree -of- Freedom  system 

A  single-degree-of-freedom  system  is  assumed 
wherein  the  period  of  the  structure  is  calculated 
for  its  fundamental  mode  only.  Higher  resonant 
frequencies  involving  more  complicated  de¬ 
flections  and  stress  patterns  are  not  considered. 

f)  Megaton-Range  Weapons 

A  20-MT  weapon  is  assumed  in  the  analyses. 

In  the  megaton  range,  damage  is  caused  at 
lower  incident  overpressures  than  in  the  kiloton- 
range,  because  of  the  significantly  longer 
duration  of  the  positive  phase.  A  discussion 
of  the  effect  of  overpressure  duration  is  in¬ 
cluded  in  appendix  D. 

Using  the  above  assumptions  and  the  maximum  static  resistance 
of  the  structure  or  component,  a  dynamic  load  is  determined.  The  level  of 
the  peak  incident  overpressure,  measured  at  the  ground  surface  under  "table 
top"  conditions,  is  found,  with  which  this  dynamic  load  is  associated.  This 
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analysis  is  repeated  for  various  e^ments  in  a  structure  to  determine  what 
element  fails  first. 

Table -3.  11,  at  the  end  of  section  3.  7,  summarizes  the  various 
parameters  used,  the  blast  analyses,  and  the  resulting  pressures  for  the 
various  units  investigated  in  this  study. 


3.  7. 2  Blast  damage  to  refinery  process  units 

At  the  end  of  each  of  the  following  damage  summations  is  a 
unit  number  corresponding  to  the  unit  number  in  table  3. 11.  Blast  damage 
calculations  can  be  found  in  reference  69. 


Figure  3.  5  illustrates  a  simplified  flow  plan  of  a  refinery 
showing  the  areas  where  the  major  units  which  were  analyzed  are  located. 


Table  3.7  summarizes  in  chart  form  the  damage  described 

below. 

3.7.2,  1  Controlhouses 


The  steel  roof  decking  of  the  controlhouse  for  the 
FCC  Unit  will  collapse  at  1.  0  psi  in  the  switchgear  room  from  a  blast  from 
any  direction.  The  roof  decking  of  the  adjacent  control  room  will  collapse 
at  1.  5  psi  from  a  westerly  blast,  but  will  survive  the  same  overpressure  from 
the  east  because  pressure  will  be  relieved  by  the  shattering  of  the  glazed  wall 
at  the  east  end  of  the  building  (picture  window).  A  blast  from  the  north  or 
south  will  start  the  roof  at  the  west  end  of  the  control  room  collapsing  until 
the  pressure  has  been  relieved  by  this  partial  roof  collapse  and  the  shatter¬ 
ing  of  the  glazed  wall  by  side-on  pressure.  The  concrete  block  walls  will 
fail  at  3.5  psi  in  both  rooms  (3.  11-la).  Figures  3.6  and  3.7  show  a  control- 
house  before  and  after  a  1. 5  psi  blast. 


The  steel  frame  of  the  controlhouse  for  the  pipe  still 
will  show  deformation  at  1.0  psi  from  blast  striking  the  windward  wall  at  the 
end  of  the  frame.  The  precast  concrete  slabs  will  collapse  in  bending  at  1.  5 
psi  from  a  blast  in  any  direction  because  of  the  small  percentage  of  openings 
in  any  of  the  walls.  The  concrete  block  walls  will  fail  at  3.  5  or  4.  0  psi, 
depending  upon  the  direction  of  the  blast.  The  steel  frames  will  collapse 
in  bending  at  10  psi  (3.  IT  lb). 
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SUMMARY  OF  BLAST  DAMAGE  TO  STRUCTURES 


Source:  Advance  Hear  arch,  Inc. 


3. 7,  2,  2  Crude  units 

The  crude  unit  with  a  steel  platform  structure  be¬ 
tween  the  vessels  will  exhibit  the  collapse  of  this  platform  structure  at  an 
overpressure  of  3.5  psi,  due  to  the  bond  failure  of  the  reinforcing  steel  in 
the  concrete  brackets  which  support  the  structure.  Depending  on  the  di¬ 
rection  of  the  blast,  this  structure  will  fall  on  either  the  atmospheric  or 
vacuum  furnaces,  and  destroy  them.  Cracking  of  the  rectangular  concrete 
frames  supnorting  the  atmospheric  and  vacuum  vessels  will  occur  at  5.5 
psi,  with  complete  collapse  of  the  frames  in  bending  at  7.0  psi.  Figures 
3. 8  and  3.  9  show  the  effect  of  6.  5  psi  (3. 1  l-2a). 

The  other  pipe  still,  which  has  the  vacuum  tower 
on  an  octagonal  reinforced  concrete  frame  and  the  fractionator  on  a  concrete 
pedestal  and  footing,  will  show  cracking  of  the  concrete  frame  at  7.  0  psi, 
accompanied  by  the  yielding  of  the  vessel's  anchor  bolts  in  tension.  At 
7.  5  psi,  these  anchor  bolts  will  fail  in  shear,  which  will  cause  the  vessel 
to  overturn  and  thereby  increase  the  load  of  the  leeward  columns.  The 
columns  cannot  take  this  load  and  bending  stress,  and  the  frame  will  also 
collapse  at  7.  5  psi.  The  anchor  bolts  of  the  fractionator  tower  will  start 
yielding  in  tension  at  4.  5  psi,  and  the  vessel,  together  with  its  foundation 
will  overturn  at  7.  0  psi  (3.  11 -2b). 

3.  7.  2.3  Fluid  catalytic  crackers 

The  first  unit  described  is  the  steel- supported  cat 
cracker.  The  wind  bracing  at  ground  level  of  the  reactor  and  fractionator 
supporting  frame  will  fail  in  shear  of  the  end  welds  at  3.  5  psi,  from  an 
easterly  or  westerly  blast.  The  outer  columns  will  buckle  at  7.  0  or  7.  5 
psi,  depending  on  direction  of  the  blast,  with  the  results  as  shown  in 
figures  3. 10  and  3. 11.  The  entire  structure  with  the  reactor  and 
fractionator  vessels  will  overturn  from  the  tensile  failure  of  the  anchor 
bolts  on  the  windward  side  at  12  psi  (3,  ll-3a). 

The  leeward  columns  for  the  regenerator  vessel 
will  exhibit  buckling  at  5.6  psi,  from  an  easterly  or  westerly  blast.  The 
entire  structure  will  overturn  through  anchor  bolt  failure  in  tension  on  the 
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Figure  3.  7  Damage  to  Controlhouse  at  1.  5  psi 


Figure  3.8  Crude  Unit 
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Figure  3. 11  Damage  to  Cat  Cracker  at  7.  0  pm 
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windward  side  at  7.  0  to  8.  0  psi,  depending  on  the  direction  of  the  blast 
(3.  ll-3a). 


The  other  cat  cracker  analyzed  had  the  regenerator  and 
the  reactor  supported  on  individual  reinforced  concrete  frames.  The 
concrete  frame  for  the  regenerator  starts  cracking  at  8.5  psi,  and  col¬ 
lapses  through  column  bending  at  16  psi.  The  reactor  frame  exhibits 
cracking  of  the  concrete  frame  at  8.0  psi,  and  complete  frame  collapse 
at  12  psi  from  column  bending  (3.  ll-3b). 

The  fractionator  for  the  cat  cracker  which  is  mounted 
on  a  pedestal  footing  with  steel  pipe  piles,  exhibits  anchor  bolt  yielding 
in  tension  at  5.  0  psi,  and  overturning  of  the  vessel  through  anchor  bolt 
failure  at  7.0  psi.  Failure  of  the  piles  is  not  expected  before  failure  of 
the  anchor  bolts  (3.  ll-3b). 

3.  7.  2.  4  Light  ends  units 

A  deisobutanizer  tower  supported  on  a  pedestal  of  mass 
concrete  will  overturn  from  the  failure  of  anchor  bolts  in  tension  at  9.  5  psi. 
The  foundation  is  large  because  it  also  supports  two  other  horizontal  vessels 
and  therefore  failure  of  the  footing  is  not  expected  before  anchor  bolt  fail¬ 
ure.  Figures  3.  12  and  3.  13  show  partial  damage  to  another  light  ends  unit 
(3.  11-4). 

A  vapor  recovery  unit,  with  an  absorber  and  lean  oil  still 
towers  supported  by  steel  frames,  will  partially  overturn  at  4.  0  psi,  but 
will  be  prevented  from  completely  overturning  by  the  restraint  offered  by  the 
low  level  structures  connected  to  each  side  of  the  main  vessel  frames.  The 
vessels  themselves  will  overturn  from  the  tensile  failure  of  their  anchor 
bolts  — the  absorber  tower  at  5.5  psi,  and  the  lean  oil  still  at  6.0  psi.  The 
overturning  of  the  vessels  will  then  cause  complete  collapse  of  the  structures 
(3.  11-4). 

3.  7.  2.  5  Water  cooling  tower 

The  corrugated  asbestos  louvers  on  the  windward  side 
will  shatter  at  0.  3  psi,  and  their  fragments  will  be  blown  into  the  interstices 


3-34 


of  the  tower,  with  little  or  no  damage  to  the  internal  parts  of  the  structure. 
Stripped  of  its  siding,  the  structure  will  become  sensitive  to  drag  loading. 

The  transverse  timber  frames  between  the  center  and 
end  shear  walls  will  collapse  into  the  concrete  water  basin  at  an  overpressure 
of  3.  5  psi.  Associated  with  this  overpressure  is  a  wind  velocity  of  140  mph 
which  creates  a  dynamic  pressure  of  approximately  46  psf  over  the  entire 
structure,  resulting  in  the  shear  failure  of  the  wind  diagonals  at  the  exterior 
columns  and  the  bending  failure  of  the  interior  columns. 

The  fan  motors  are  not  expected  to  suffer  any  damage,  but 
the  collapse  of  the  tower  will  damage  the  fan  blades  beyond  repair  (3. 11-5), 

3.  7. 2.  6  Furnaces  (pipe  still) 

The  atmospheric  and  vacuum  furnaces  for  a  pipe  still  will 
be  shifted  slightly  from  their  original  positions  at  1.  5  psi,  by  the  shearing 
of  the  anchor  bolts.  The  stacks  will  collapse  at  6.0  psi  from  plate  buckling. 
The  furnace  and  its  frame  will  overturn  at  6.  5  psi  from  anchor  bolt  failure 
resulting  from  a  combination  of  drag  and  reflected  pressures  (3. 11-6). 

3.7. 2.7  Miscellaneous  structures 

a)  Maintenance  building 

The  corrugated  asbestos  siding  will  shatter  at 
0.  3  psi,  thereby  relieving  the  pressure  on  the 
roof,  which  will  survive  until  the  steel  frame 
collapses.  The  frame,  with  the  roof  and  brick 
walls  intact,  will  suffer  deformation  at  3.0  psi, 
and  will  be  permanently  deformed  when  the 
brick  walls  fail  at  5.  0  psi.  The  cranes  would 
then  be  inoperable  because  of  deformed  rails, 
if  they  were  at  the  ends  of  the  buildings  at  the 
time  of  the  blast.  The  frame  will  collapse  in 
column  bending  at  6.  0  psi. 

The  frames  will  survive  a  higher  overpressure, 
if  the  three  overhead  cranes  are  located  at  the 
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Figure  3.  13  Damage  to  Light  Ends  Unit  at  4.  0  psi 


quarter,  half,  and  three-quarter  points  between 
the  ends  of  the  building.  There  is  always  the 
possibility  that  the  cranes  would  be  dislodged 
from  their  rails,  however,  when  the  frame  is 
deformed,  thereby  destroying  otherwise  salvage¬ 
able  equipment  below  (3.11-7). 


b)  Flare  stacks 

The  tower-supported  flare,  when  oriented  squarely 
to  the  blast,  will  overturn  at  4.  0  psi,  by  uplifting 
of  the  foundations  on  the  windward  side  and  column 
buckling  on  the  leeward  side.  The  same  mode  of 
failure  will  occur  at  3.0  psi  when  the  tower  is 
oriented  diagonally  to  the  direction  of  the  blast 
(3.  ll-8a). 

The  guyed  flare  stack  has  three  sets  of  guys.  The 
stack  above  the  middle  collar  will  collapse  by  the 
shear  failure  of  the  collar  connection  pin  of  the 
upper  collar  at  11.0  psi.  Complete  collapse  of 
the  stack  will  occur  at  15.  0  psi  from  the  shear 
failure  of  the  pin  connections  of  the  upper  and 
lower  connections  (3.  ll-8b). 

It  should  be  pointed  out  here  that  the  analysis  of 
the  guyed  flare  stack  results  in  a  very  approximate 
solution  because  such  a  structure  has  marked  non¬ 
linear  characteristics.  The  analysis  then  becomes 
complicated  because  of  the  difficulty  in  obtaining  the 
correct  solution  to  the  nonlinear  equations  which 
govern  the  behavior  of  the  structure.  For  example, 
a  major  factor  which  contributes  to  this  nonlinear 
behavior  is  the  displacement  of  the  collar  end  of  the 
guys.  Another  difficulty  is  the  combination  of 
periods  of  vibration  of  the  guys  and  the  stack. 
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c)  Pipe  bands 

Steel- supported  pipe  bands  will  start  deforming 
at  3.  5  psi,  and  will  collapse  in  column  bending 
at  6.  0  psi  (3. 1 1-Sa). 

The  analysis  of  the  reinforced  concrete- supported 
pipe  band  is  predicated  on  the  assumption  that  it 
carried  the  same  loading  as  that  carried  by  the 
steel- supported  pipe  band.  This  procedure  was 
necessitated  by  the  fact  that  plans  showing  the 
sizes  and  locations  of  the  pipes  were  not  obtain¬ 
able.  On  this  premise,  the  concrete  columns 
start  cracking  at  3.5  psi,  and  will  collapse  in 
bending  at  5.0  psi  (3.11-9b). 

d)  Boiler  stack 

This  self-supporting  steel  stack  and  its  concrete 
foundation  will  overturn  at  6.  5  psi,  without  anchor 
bolt  failure,  because  of  the  number  and  size  of 
bolts  (3.  11-10). 

e)  Administration  building 

63 

A  previous  case  study  by  Fernald,  et  al. ,  of  an 
existing  electronics  plant  contains  an  analysis  of 
a  first-floor  slab  which  is  the  roof  of  a  shelter  in 
the  basement  of  the  building.  The  purpose  of  this 
analysis  was  to  determine  the  critical  overpressure 
for  slab  failure. 

This  analysis  can  be  applied  to  first-floor  slabs  in 
administration  buildings  where  a  shelter  area  has 
been  designated  in  the  basement. 

The  results  of  this  analysis  show  that  if  existing 
windows  act  effectively  as  inlet  openings,  the 
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possibility  01  a  complete  collapse  of  the 
building  on  top  of  the  slab  is  remote  and 
the  slab  may  be  assumed  to  withstand  5.5 
psi  overpressure  (3. 11-11). 

3.  7.3  Blast  damage  to  tetraethyl  lead  (TEL)  building 

The  vulnerability  of  the  TEL  building  which  houses  the  batch 
process  is  determined  by  referring  to  calculations  for  other  similar  build¬ 
ings  which  were  analyzed  in  a  previous  report  by  Advance  He  search  for  the 
Office  of  Civil  Defense.  This  report  is  entitled,  “Critical  Industry  Repair 
Analysis,  Food  Industry",  and  can  be  obtained  through  the  Defense  Docu¬ 
mentation  Center,  DDC  No.  AD- 6 14- 908, 

The  walls  of  the  TEL  building  are  comparable  to  those  of  the 
warehouse  of  the  sugar  plant  of  the  above-referenced  report.  The  clearing 
distance  of  the  TEL  building  is  about  twice  that  of  the  sugar  warehouse  and 
the  panel  sizes  are  similar;  therefore,  the  walls  can  be  expected  to  fail  at 
an  overpressure  of  2  psi. 

The  steel  frame  of  the  TEL  building  and  the  frame  loading  are 
similar  to  the  process  building  of  the  citrus  juice  plant  in  the  Food  Industry 
report.  Therefore,  the  frame  would  suffer  distortion  at  7  psi, ,  resulting 
in  many  process  pipe  failures.  The  frame  will  collapse  at  an  overpressure 
of  10  psi.  A  more  detailed  analysis  may  be  presented  in  a  future  report. 

3, 7.  4  Blast  damage  to  storage  facilities 

Refined  petroleum  products  are  chiefly  stored  at  refineries 
and  at  bulk  terminals  located  near  markets.  Cone  roof  tanks  are  generally 
for  storage  of  less  volatile  liquids,  and  floating  roof  tanks  are  generally  for 
more  volatile  products  to  reduce  fire  hazard  and  evaporation  losses.  LPG 
is  stored  under  pressure  in  spheres  and  underground;  It  can  also  be  stored 
in  refrigerated  tanks  and  spheroids. 

Any  discussion  of  blast  effects  must  touch  on  fire,  since  the 
release  of  combustibles  from  blast-damaged  tanks  and  processing  equip¬ 
ment  is  a  leading  cause  of  fire.  All  that  is  needed  is  a  source  of  combustion 
to  ignite  the  fluids  and  gases. 
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Petroleum  liquid  storage  tanks  represent  a  serious  fire 
hazard  at  a  petroleum  refinery  because  of  the  large  quantities  of  fuel 
contained.  Such  fires  might  spread  to  processing  areas,  and  cause 
interruption  of  production.  Little  storage  tankage  is  required  for 
emergency  operations,  and  there  is  a  wide  range  of  possible  substitutions 
of  one  tank  for  another.  The  U.S,  Strategic  Bombing  Survey  showed 
that  large  fires  in  refinery  storage  areas  could  have  relatively  little  effect 
on  oil  production.  Generally,  then,  loss  of  storage  tanks  will  be  far  less 
serious  titan  destruction  of  a  refinery. 

The  vulnerability  to  fire  is  discussed  in  detail  in  connection 
with  the  Whiting,  Texas  City,  and  Signal  Hill  holocausts  in  section  3.8, 

As  demonstrated  in  these  cases,  it  is  assumed  that  any  spilled  liquids 
will  be  ignited  by  sparks  or  by  the  ignition  sources  present  around  the 
plant. 

The  effects  of  thermal  radiation  are  also  discussed  in  section 
3.  8,  This  is  a  much  more  serious  problem  for  weapons  in  the  megaton 
range  than  for  weapons  in  the  kiloton  range  because  of  the  former's  much 
greater  intensity  and  pulse  duration,  by  an  order  of  magnitude  for  equal 
overpressures.  This  section  deals  primarily  with  the  analysis  of  the 
effect  of  blast  on  petroleum  liquids  storage  tanks. 

Two  basic  storage  tank  configurations  are  considered:  (1)  the 

cylindrical  shell,  welded  steel  tank  with  either  a  cone  roof  or  floating  roof 

used  for  storage  of  crude  oil,  gasoline,  kerosine,  diesel  fuels,  and  other 

refined  products,  at  atmospheric  pressure,  as  described  in  API  Standard 
39 

650,  and  \2)  welded  Bteel  storage  spheres  used  for  the  storage  of  volatile 

gases  and  liquids  under  pressures  up  to  250  psi.  LPG  is  also  stored  under 

pressure  in  spheres  and  underground.  Table  3.  8  gives  data  on  storage 

40 

capacity  of  refined  products  at  refineries  and  bulk  terminals.  The  wide 
dispersion  of  facilities  is  indicated  by  the  table.  Although  there  appears 
to  be  a  considerable  amount  of  stored  fuel,  it  represents  only  part  of  an 
eight-day  supply. 
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3.  7.  4.  1  Storage  tanks 

a)  Cylindrical  shell  tanks 

While  a  considerable  amount  of  theoretical  analysis  has  been 
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done  on  the  blast  resistance  of  petroleum  liquid  storage  tanks,  ' 
this  is  reviewed  to  determine  the  pertinence  of  the  results  to 
the  present  study,  particularly  as  they  relate  to  the  effects  of 
weapons  in  the  megaton  range.  The  results  of  these  studies 
are  summarized,  as  follows: 

The  blast  resistance  of  cylindrical  storage  tanks  is  independent 
of  weapon  yields,  at  the  same  overpressures  for  yields  of  500 
KT  or  greater. 

The  critical  failure  mode  is  caused  by  uplift  of  the  base  of  the 
cylindrical  shell,  over  a  portion  not  exceeding  one-half  of  its 
circumference.  This  uplift  occurs  before  other  possible  failure 
modes,  such  as  shell  buckling  or  bending,  become  significant, 
and  it  induces  strains  both  in  the  steel  plates  of  the  shell  and  in 
the  joint  between  the  shell  and  the  tank  bottom  sufficient  to  cause 
rupture  and  loss  of  contents  of  the  tank  through  leakage. 

The  effects  of  drag  loading,  sloshing  and  spilling  of  liquids, 
wind  girders,  and  roof  configurations  do  not  require  particular 
mention  in  the  analysis  of  blast  resistance. 

Empty  tanks  can  be  expected  to  fail,  by  uplifting,  at  between 
1.  0  and  1.  5  psi.  Filled  or  partially- filled  tanks  can  be  expected 
to  fail  at  overpressures  ranging  to  6.  5  psi,  depending  on  the  ex¬ 
tent  of  filling  and  height-to-diameter  ratio  of  the  tank. 

Floating  roofs  fail  at  an  overpressure  of  approximately  20  psi, 
and  cone  roofs  fail  at  much  lower  overpressures.  The  refer¬ 
enced  study  estimates  that  cone  roofs  will  fail  at  about  0.  5  psi, 
and  pieces  will  blow  away  at  this  overpressure. 

Advance  Research's  investigations  further  lead  to  several  additional 
conclusions. 
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Reference  69  contains  calculations  on  a  cone  roof,  supported 


by  columns  inside  the  tank  and  with 
for  additional  support  and  braci- 
roof  on  a  tank  at  Baton  Rouge. 

API  Standard  650,  The  calc, 
will  occur  at  about  1.3  psi,  \ 
buckling.  This  will  cause  inv. 
will  not  necessarily  lead  to  tain-, 
through  leakage  (3.  11- 12a). 


radially  oriented 
typical  cone 
onforms  with 
■  it  roof  failure 
umns  fail  in 
the  roof,  but 
u  or  loss  of  contents 


The  actual  collapse  of  the  cone  roof  will  not  appreciably  affect 
the  blast  loading  on  the  tank  shell.  If  the  tank  is  full,  the  roof 
collapse  will  allow  the  overpressure  to  become  directly  applied 
to  the  liquid  surface,  as  in  the  case  of  a  floating  roof  tank  or  a 
roofless  one.  This  increases  the  radially-directed  outward 
pressure  on  the  inside  of  the  shell,  which  helps  the  shell  to 
resist  the  external,  inwardly-directed  overpressure.  The 
magnitude  of  this  additional  pressure  at  2.  0  psi,  however,  is 
on  the  order  of  one-tenth  of  the  hydrostatic  pressure  for  a  full 
tank,  and  is  therefore  not  very  significant  in  the  overall  tank 
blast  resistance. 


If  collapse  of  the  roof  is  the  only  tank  damage,  repair  is  made 
relatively  easy  by  removing  the  old  roof  and  replacing  it  with 
a  temporary  wooden  cover  or  floating  covers,  such  as  circular 
plywood  panels,  where  specific  gravity  characteristics  permit. 
The  presence  of  vapors  at  the  top  of  a  tank,  if  open  to  the 
atmosphere,  can  create  a  very  dangerous  situation  because  of 
the  ease  with  which  such  vapors  can  be  ignited,  as  in  a 
ligntning  storm,  and  should  be  avoided.  The  danger  from 
tank  contents  leakage  is  proportionate,  of  course,  to  the 
quantity  leaked.  An  empty  tank,  although  failing  at  relatively 
low  overpressures,  does  not  create  a  serious  hazard.  On  the 
other  hand,  failure  of  a  full  tank,  not  individually  diked,  can 
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allow  the  spread  of  volatile  and  flammable  liquids  over  a 
large  area  with  consequent  serious  fire  hazard. 

Tanks  are  frequently  not  individually  diked.  At  Pascagoula, 
tanks  are  grouped  in  ground  basins  capable  of  containing  the 
contents  of  one  full  tank  only.  If  more  than  one  full  tank 
fails,  spillover  could  result.  This  is  somewhat  compensated 
by  drains  in  each  basin  leading  to  an  open  canal  emptying  into 
the  Gulf.  The  drains  can  be  opened  by  locally-operated 
valves. 

Another  related  problem  is  the  spacing  between  tanks,  which 

affects  the  likelihood  of  fire  spread  from  tank  to  tank.  This 

tank  spacing  has  been  found  to  vary  from  refinery  to  refinery, 

and  a  high  percentage  do  not  have  adequate  spacing  between 

tanks;  according  to  current  definitions  of  "adequate'1  tankage 

subject  to  possible  explosion  hazard  should  be  spaced  by  at 

6 1 

least  two  tank  diameters, 
b)  Spherical  shell  tanks 

Spherical  tanks  are  used  for  the  storage  of  volatile  liquids, 
liquid  petroleum  gases  such  as  propane  and  butane,  and 
natural  gas,  under  pressures  up  to  250  psig.  Because  they 
contain  volatile  liquids  under  pressure,  spherical  shell  tanks 
are  potentially  more  dangerous  than  cylindrical  shell  liquid 
petroleum  storage  tanks  with  cone  or  floating  roofs.  With  few 
exceptions,  such  as  methane  and  ethane,  most  petroleum  gases 
are  heavier  than  air,  and  are  flammable.  This  means  that 
either  there  will  be  an  explosion  at  the  tank  or,  failing  that, 
the  gas  will  flow  down  to  and  along  the  ground.  If  and  when 
this  drifting  mass  of  gas  finds  a  flame  or  spark,  the  explosion 
or  fire  can  be  extremely  destructive  and  the  scale  of  damage 
comparable  to  that  of  a  mass  refinery  fire. 
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The  sphere  itself  is  made  of  welded  steel  plates  and  is 

designed  to  withstand  the  internal  operating  pressure  with 

44 

a  safety  factor  of  four.  The  supporting  columns,  or 
legs,  and  foundations  are  normally  designed  to  withstand 
wind  loads  to  100  mph  and  the  dead  load  of  the  tank  filled 
with  water  for  hydrostatic  test.  Sphere  diameters  can 
range  up  to  76  feet,  but  are  generally  smaller.  Columns 
are  mounted  on  piers  with  individual  footings. 

Because  of  size  and  configuration,  storage  spheres  are 

primarily  drag- sensitive  targets,  and  the  sphere  is  a 

relatively  low  drag  shape  in  the  range  of  high  Reynolds 
5 

numbers,  over  10  ,  which  apply  in  cases  of  nuclear  blast. 
Because  of  the  potential  hazard,  they  are  designed  for  greater 
structural  ruggedness,  as  pressure  vessels,  than  are 
cylindrical  storage  tanks.  The  spheres  are  accordingly 
much  less  vulnerable  to  blast  than  cylindrical  cone  roof 
or  floating  roof  tanks,  being  able  to  withstand  overpressures 
up  to  9.0  psi  without  overturning.  At  this  overpressure, 
calculations  on  a  38-foot  diameter  butane  sphere  indicate  that 
overturning  would  result  from  column  bending.  The  sphere 
analyzed  has  a  peak  operative  design  pressure  of  25  psig, 
which  is  somewhat  below  average  for  this  type  of  vessel. 

The  shell  plates,  and  consequently  vessel  weight,  are  thus 
lighter  than  average.  A  vessel  designed  to  operate  at  higher 
internal  pressure  would  be  heavier  and  would  therefore  have 
greater  blast  resistance  because  of  the  restraining  moment  of 
the  weight  (3.  ll-12b). 

In  conclusion,  storage  spheres,  although  potentially  very 
hazardous  because  of  the  high  internal  pressures  and  volatility 
of  the  stored  products,  do  not  suffer  major  damage  at  over¬ 
pressures  up  to  6.  5  psi.  The  failure  mode  for  spheres  is 
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overturning,  and  for  cylindrical  tanks  it  is  tank  leakage 

69 

resulting  from  uplift.  In  the  first  case,  volatile 
substances  under  pressure  would  be  spread  over  a  large 
area  and  would  probably  ignite,  causing  a  serious  fire. 

In  the  second  case,  spread  of  the  liquid,  and  thus  the 
relative  fire  danger,  depend  on  the  amount  of  diking 
around  individual  tanks. 

Although  generally  more  vulnerable  than  processing  units, 

storage  tanks  can  be  repaired  more  easily  and  quickly. 

A  refinery  that  suffers  major  damage  to  its  storage 

capacity,  but  only  light  damage  to  operating  units,  can 

return  to  operating  condition  fairly  soon,  because  refined 

products  can  be  shipped  to  other  installations  for  blending 

and  storage.  An  example  of  this  occurred  after  the 
45 

Whiting  fire,  where  damage  to  storage  tanks  was 
extensive  but  damage  to  processing  units  was  negligible, 
except  for  the  fluid  hydroformer  unit  that  exploded. 

3.  7.  4.  2  Study  of  a  tank  farm  vulnerability 

This  section  describes  a  study  of  the  vulnerability  of  the  storage 
tank  area  at  the  Pascagoula,  Mississippi,  refinery  of  Standard  Oil  Company 
(Kentucky)  (see  figure  3.  14).  At  Pascagoula,  as  at  many  other  installations, 
the  crude  oil  and  product  storage  tanks  are  not  individually  diked,  but  are 
instead  located  together  in  groups  of  about  10  tanks  in  areas  which  have  only 
dikes  around  their  boundaries.  The  diking  around  each  area  is  adequate  for 
containment  of  the  contents  of  the  largest  tank  in  the  group  when  filled  to 
capacity.  In  the  course  of  normal  operations  this  amount  of  diking  is  adequate 
for  most  situations  apt  to  arise,  because  only  one  tank  at  a  time  is  likely  to 
spring  a  leak.  In  the  event  of  a  nuclear  weapons  attack,  however,  it  is  likely 
that  several  tanks  would  spring  leaks  at  once,  as  the  result  of  blast  damage  or 
damage  resulting  from  secondary  missiles,  and  this  type  of  diking  in  groups 
would  probably  be  insufficient  to  contain  the  resulting  larger  quantity  of  spilled 
liquids. 
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Figure  3.14  View  of  Pascagoula  Refinery 


In  the  present  study  an  analysis  has  been  made  of  the  13  diked 
areas,  or  groups  of  tanks,  at  the  Pascagoula  refinery,  based  on  data  of 
the  contents  of  each  tank  on  one  particular  day,  February  8,  1965.  It 
has  been  assumed  that  these  data  fairly  represent  a  typical  situation  that 
could  exist  on  any  day,  and  that  the  results  based  on  them  would  apply 
generally  to  the  situation  of  the  refinery  at  the  time  of  an  attack. 

The  tanks  at  the  Pascagoula  refinery  are  mostly  floating  roof 
welded  steel  tanks,  conforming  to  API  Standard  650.  The  mode  of  failure 
used  for  this  analysis,  as  described  in  section  3.  7.  4.  1,  is  uplift  of  the 
cylindrical  shell  of  the  tank  along  a  portion  of  its  circumference,  not 
exceeding  1/2  the  circumference,  causing  rupture  of  the  joint  between 
shell  plates  and  tank  bottom  with  consequent  loss  of  contents  through  leak¬ 
age. 

Using  the  refinery's  stock  report  of  February  8,  1965,  which 
indicated  a  fuel  storage  of  3,448,613  bbl,  table  3.9  shows  the  lowest 
incident  blast  overpressure  that  would  cause  flooding  of  each  diked  area. 
Area  No.  14  is  the  most  vulnerable,  flooding  at  2.  3  psi  incident  blast 
overpressure,  and  Area  No.  17  is  the  least  vulnerable,  flooding  at  12.5 
psi,  at  which  pressure  all  tanks  in  all  areas  would  fail.  The  flooding  of 
any  one  area  would  cause  hydrocarbon  liquids  to  flow  into  adjacent  areas, 
some  of  which  would  be  processing  areas  where  there  are  sources  of  ignition 
from  the  processing  furnaces  and  other  equipment.  Thus,  the  probability 
of  fire  is  high  if  storage  areas  are  flooded  and  overflow  their  dikes.  Area 
No.  14  is  not  located  near  the  processing  areas  and,  furthermore,  it  only 
contains  two  tanks.  But  Area  No.  11,  which  would  flood  at  2.  8  psi,  is 
adjacent  to  the  processing  areas  and  contains  25  tanks.  Its  flooding,  there¬ 
fore,  would  result  in  a  very  hazardous  situation. 

In  table  3. 10,  the  quantities  of  liquids  lost  through  tank  leakage 
are  shown  for  incident  blast  overpressures  between  1. 0  and  12.  5  psi.  The 
range  of  the  overpressures  listed  is  not  intended  to  coincide  with  that  in 
table  3.  9,  because  the  quantities  listed  are  those  which  would  leak  from  the 
tanks  into  the  diked  areas,  regardless  of  whether  or  not  the  areas  would  be 
flooded  and  overflowing. 
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Table  3.9 


VULNERABILITY  OF  TANKAGE  AREAS  TO  FLOODING 


$ 

Area  No. 

Total 

Tanks 

Tank  Failures 
to  cause 
Flooding 

Blast  Over¬ 
pressure  at 
Flooding 

Dike 

Capacities 

BBL 

1 

7 

4 

5.5 

110.010 

2 

10 

5 

6.1 

110.010 

3 

10 

10 

6.6 

163,400 

4 

11 

10 

5.0 

110,010 

5 

7 

6 

4.4 

65,810 

6 

8 

5 

4.7 

106,600 

11 

25 

10 

2.8 

15,000 

12B 

9 

6 

4.2 

26,700 

13 

14 

9 

5.0 

110,010 

14 

2 

2 

2.3 

110,010 

15 

7 

7 

5.0 

65,810 

16 

5 

3 

5.0 

106,600 

17 

6 

6 

12.5 

274,000 

Total  Volume  of  I 

liked  Areas 

1,373,970  bbl 

*  Only  those  areas  containing  large  diameter  cylindrical  shell  storage  tanks 
have  been  listed. 
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Table  3.  10 


ACCUMULATED  TANK  LEAKAGE 


Pressure 

nsi 

Accumulated 

Losses 

BEL 

1.0 

116 

1.4 

5,  077 

2.0 

96,  604 

2.  5 

179,  114 

3.0 

288,  271 

3.  5 

372,  266 

4.  0 

505,  124 

4.  6 

721,  528 

5.  0 

1,  344,  726 

5.  5 

1.  617,  716 

6.  1 

1,  838,  513 

G.  6 

2,  838,  914 

7,  7 

2,  917,  415 

12.  5 

3,  448, 613 
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In  conclusion,  it  appears  that  an  extremely  hazardous  situation 
could  develop  from  leakage  of  petroleum  liquids  at  overpressures  below 
3.  0  psi.  Since  there  is  a  strong  probability  of  ignition,  a  devastating  fire 
could  result  which  would  destroy  a  large  part  of  the  refinery. 

3,7.4.  3  Bulk  storage 

A  large  pipeline  terminal  located  outside  of  Boston  is  comprised 
of  a  tank  farm  with  cone  roof  tanks  estimated  to  have  a  50,000  bbl  capacity, 
small  administration  building,  truck  loading  dock,  and  various  utility  sheds. 

Analyses  made  for  other  similar  units  in  this  study  indicate  that 
the  cone  roofs  of  the  tanks  will  collapse  at  1.  3  psi.  and  if  filled  or  partially 
filled,  failure  will  occur  at  the  base  of  the  tank  allowing  the  contents  to  leak 
out  (section  3.  7.  4.  1).  The  one-story  administration  building  has  the  con¬ 
figuration  and  the  construction  of  a  typical  refinery  controlhouse.  The  roof, 
then,  is  expected  to  collapse  at  1.  0  to  1.5  psi,  and  the  brick  walls  to  collapse 
at  3. 5  psi  (section  3.  7.  2.  1). 

In  general,  storage  areas  — at  refineries,  bulk  terminals,  and  tank 
farms— are  well  dispersed;  many  different  tanks  are  readily  interchangeable 
where  substitution  is  needed;  they  are  more  easily  repaired  than  most  pro¬ 
cessing  units;  and  relatively  little  storage  is  needed  for  petroleum  production, 
because  refinery  operation  depends  upon  a  continuous  inflow  of  crude  oil, 
rather  than  on  storage.  The  usable  national  supply  of  stored  crude  oil  amounts 

5 

to  no  more  than  eight  day's  worth,  at  the  current  rate  of  refinery  consumption. 

This  is  because  the  growth  of  pipeline  networks  is  effectively 
obviating  the  need  for  storage  of  crude  oil  as  working  stock  for  refineries. 

A  five  month's  supply  of  stored  crude  was  maintained  in  1930;  by  1963,  this 
stock  level  had  been  reduced  to  27  days.  According  to  the  Department  of  the 
Interior,  less  than  one-third  of  this  can  be  considered  readily  available  in 
the  preattack  period,  since  the  balance  consists  of  pipeline  fill,  tank  bottoms, 
and  other  relatively  unavailable  inventories.  How  much  of  this  remainder 
could  be  recovered  under  postattack  exigencies,  and  by  what  means,  has  not 
been  determined,  and  could  prove  a  worthwhile  subject  for  further  study. 
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3,7,5  Texas  City  disaster 

This  disaster  is  of  particular  interest  in  this  study  because  the 
area  affected  contained  petroleum  refineries,  tank  farms,  pipeline  facilities, 
docks,  and  a  styrene  and  polystyrene  production  plant  of  the  Monsanto 
Chemical  Company, 

The  disaster  resulted  from  the  explosions  of  two  ships,  which 
were  tied  up  at  piers,  loading  ammonium  nitrate  fertilizer.  The  explosions, 
a  day  apart,  created  extensive  blast,  missile,  and  fire  damage,  and  were 
responsible  for  many  deaths,  injuries,  and  an  estimated  $67  million  of 
damage. 

The  Monsanto  plant  was  located  directly  across  the  slip  from  the 
first  ship  which  exploded,  and  most  of  its  processing  units  were  about  1/4 
mile  away.  The  plant  was  immediately  engulfed  in  flames  caused  by 
ignition  of  combustible  hydrocarbons  in  the  polystyrene  building,  the  ethylene 
purification  units,  the  alkylation  unit,  the  distillation  towers,  and  storage 
tanks  of  benzol,  fuel  oil  and  other  low  vapor  pressure  hydrocarbons.  The 
ship  blast  also  caused  extensive  damage  to  Monsanto  warehouses.  Ware¬ 
houses  on  the  adjacent  piers  were  badly  damaged  by  blast  and  fire,  there 
were  fires  on  the  water's  edge  from  pipelines  that  had  been  split  by  missiles 
or  blast,  and  six  tanks  in  the  Stone  Oil  Company  farm  (4000  feet  away)  ignited. 

A  day  after  the  first  explosion  the  other  ship  exploded  and  this 
second  blast  had  about  the  same  force  as  the  first,  completely  disintegrating 
the  ship  and  demolishing  buildings  and  facilities  already  damaged  by  the  first 
explosion.  New  fires  were  started  by  red-hot  missiles  in  the  Humble  Pipe 
Line  Company  property  (2800  feet  away),  the  Stone  Oil  Company  farm  (4000 
feet  away),  the  Republic  refinery  (6700  feet  away),  and  the  Carbide  and  Carbon 
Chemical  Company  refinery  (1200  feet  away).  Except  for  cue  slowly  burning 
tank  of  bunker  oil  which  was  extinguished  by  foam,  the  tank  farm  fires  were 
allowed  to  burn  themselves  out  because  all  efforts  were  being  devoted  to 
rescue  operations.  Many  other  tanks  were  hit  by  missiles  in  both  explosions 
but  did  not  ignite. 
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From  the  estimated  energy  of  the  explosions  (2-4  KT)  it  is 

possible  to  make  some  estimates  and  comparisons  with  a  hypothetical 

20  MT  air  burst.  Monsanto's  alkylation  and  distillation  units,  struc- 

(  turally  similar  to  those  in  petroleum  refineries  today,  were  about  1/4 

mile  from  the  first  explosion  and  experienced  about  12  psi  incident 

overpressures  with  0,3  second  positive  phase  duration.  The  blast 

damage  to  controlhouses,  instruments,  piping  and  auxiliary  equipment 

was  extensive,  and  horizontal  and  vertical  reactors,  towers  and  their 

supports  were  extensively  damaged  by  fire.  Fractionating  towers  in 

the  ethylene  area  were  warped  and  leaning  from  fire  damage,  but 

48 

much  of  the  steel  structures  surrounding  them  remained  intact. 

For  a  20  MT  air  burst,  roughly  the  same  amount  of  blast 

damage  to  refineries  occurs  at  an  overpressure  of  5.  5  psi  (see  table 

3.7),  and  at  a  range  of  approximately  11  miles.  This  overpressure 

is  much  less  than  the  12  psi  for  the  2-4  KT  blast,  but  the  duration 

of  the  positive  pressure  is  7  seconds  -  an  18-fold  increase  over  the 

47 

0.  3  second  duration  of  the  kiloton  blast.  The  effects  of  overpressure 

duration  are  discussed  further  in  appendix  D. 


i 


3-54 


Duration 

I  Shook  Front  of  I'untiive 
Velocity  Phase 


Duration  of  iVrpwsmirf 

_ (Kuuiv.  triangular  load) 

Incident  I  Itel'Lected  |  Drag 


I  Oak  Value 
Resistance  Ua:iu  k>f  Dynamic 
C  i  Load 


1  Hiii -  Pni*2.22/!.3.4 


J  qto o.bt/i.ii 

:0/n.HHn.  10)  I 

1 ,54c  1 .3), 'll,  82  (p.  ID)  •  no- 1.34/5,17 
i  ,b»*.  i  .:o/o.*Ki(w.:ro ■  qn.  i  .35/2.40 
].« 

i  .4*«  i  .3>/n.r,o(«.  2B>  no  •  n.4  a  i\ .  J  2 
J.4  no*  1.41 


1 .56*- 1.  •«)/!>.  7B*I  *101'  c|.  ■  •  |  .113/3.21 
1.5b  •l.3)/0.72t"2fl).  t»o. 0.55 /1. 1 5 
l.4b»1.3)/0.60b*  101.  qo»  2.54  /  4, 811 
0.37  qn>2.0t! 

0.55  no- 1.17 

o.ito  nt-o.42 

1,4b*  1 ,3)/0.55b*20)  .qc  0.5  7/1.321 
0.73  qmO.75  1 

0.77  qmO.Ol 


Incident  Overpressure 

p. 

„ 

Fur 

For 

deformation 

collapse 

Ipst) 

(psi) 

l.fi 

1.1 

1.5 

5.1 

1.0 

5.5 

10.0 

3.4 

3.5 

7.0 

7.0 

IN 

7.0 

10 

7.5 

4.5 

7.0 

7.5 

7,0 

7.5 

t'2,0 

3.5 

7.3 

5.0 

7,0 

5.5 

3.0 

a.o 

3.1 

8.0 

12.0 

4.8 

7.0 

8.5 

lfi.0 

0.5 

6.5 

4.: 

5.0 

B.O 

5.6 

6.0 

0.20  C.,»0.2.VI,('  •10.7  CP.»O.I1,r  *0.88  l»mtqn-14.2 
0.20  r,  .0.2’*  C;d.15.3  C_  »0.««,c',1*1.63  I’rofqo.  2.55 
0.27  8.0  ld  1  0.05  d  qo*  0.00 


Sit-rl  decking  of  th»*  s witch  gear  and  control  rooms  collapses  at  1.0 
und  1.5  ptt i  respectively,  if  wail  openings  are  less  than  30'*..  If  the 
blast  approaches  in  Hie  direction  of  the  glazed  wall  which  is  com¬ 
monly  found  in  ronlrol  rooms,  the  roof  >s  expected  in  survive  until 
the  frame  collapses. 


Hoof  beams  are  not  critlca1.  because  the  precaat  concrete  planks 
fail  ai  1,3  psi,  winch  .is  leas  lhan  that  for  the  heam*  (5.0  psO. 
The  steel  building  frame  suffers  deformation  ai  l.Opst,  with  the 
roof  and  walla  intact.  The  brick  wall*  collapse  at  3.5  psi  (see 
nest  sheet)  precluding  frame  failure  a'  5.5  psi,  thereby  Iraving 
a  bare  frame  which  collapses  at  10  psi. 


The  overpressure  of  3.5  pai  for  'he  l>ond  failure  of  the  conoreie 
bracket  is  assumed  to  he  twice  the  resistance,  H. 

The  rectangular  cone  re  I  e  frames  of  Hie  vhciiuiii  and  atmospheric 
lowers  exhibit  cracking  at  5.3  t>si.  and  eojianse  n«  7.0  nsi. 
i/\.  It.  ■  Anchor  Itnlis) 

The  octagonal  rone  re  I  e  frame  of  the  vacuum  tower  starts  reselling 
at  7.0  psi.  Mefore  Die  frame  la  ralrulatrd  to  collapse  al  10  |isi  from 
column  bending,  the  vessel's  anchor  holts  shear  causing  the  vessel 
lo  shift  h'  7.5  psi,  thereby  overloading  the  leeward  columns  of  (he 
frame,  The  frame  will  then  collapse  at  Die  same  overpressure  as 
ihnt  causing  the  hull  shear -7.5  psi. 


Reactor  K  Fractionator  “Although  wind  hearing  falls  at  3.5  pst.  and 
iW  extVrTor'cdTu'mna  on  the  leeward  side  buckle  at  7.0  or  i.Spn, 
depending  un  the  direction  or  the  blast,  the  steel  frame  Is  standing 
but  in  a  deformed  condition.  The  entire  structure  overturns  from 
the  tensile  failure  of  ihr  anchor  bolts  on  Die  windward  side  al  ’2.0 p»‘ 
Itegener.Hor-Thr  wind  bracing  fails  at  3. It  psi.  '('lie  eaierior  and 
first  interior  columns  on  the  leeward  side  buckle  at  5.0  pal  from  a 
blast  in  either  direction,  however  the  frame  Slavs  mind  but  deforme 
The  entire  structure  overturns  from  the  tensile  failure  of  the  anrhn' 
holt*  on  the  windward  side  at  7,0  or  8.0,  depending  on  Die  direction 
(he  blast. 

Ileactor  K  Regenerator- The  rectangular  concrete  frames  exhibit 
<’ racking’ af  TT.iVarel  5, 5  psi  respectively,  and  collapse  from  column 
henriing  at  12. f*  and  tu.O  nsi  respectively.  Fractionator — The  vesse’ 
anchor  bolts  start  yielding  :n  4.5  psi,  and  wilTT’tKe  tensT.e  failure  ••( 
anchor  holts  at  7,0  psi,  |he  vessel  overturns.  Since  the  vessel  is 
founded  on  a  pedestal  and  steel  pipe  piles,  anchor  bo  it  failure  is  e*  • 

-  heated  before  that  of  the  piling.  ^ 

Delsoimt.nilr.i-r  -  Vessel  overturns  from  anchor  bolt  failure  at  P.5  psi. 

3  he  vessel  is  founded  mi  a  very  large  footing  which  support*  other 
horizontal  vessels.  Tills  foundation  is  no'  <  ,p.  e>d  to  fail  before 
the  anchor  bolts.  Vapor  Hecoyery  Fmt-  Hie  anrhor  bolts  of  the 
franc  supporting  the  absorber  tower  and  the  lean  oil  still  fail  at  4.0psl, 
however,  the  frame  la  restrained  from  overturning  by  Ihe  low  framing 
on  each  side  of  the  vessel  framing.  The  vessel's  anchor  bolts  fail  In 
tension  al  5.5  pa!  for  the  absorber,  and  5.0  psi  for  the  lean  oil  slill. 

The  entire  structure  will  collapse  al  8.5  psi,  if  nol  already  from  the 
overturning  of  the  vessels  themselves. 

The  corni»jii'u  usucsioa  luuvcrs  on  the  windward  side  will 
shatter  at  0.  J  psi  and  their  fragments  will  he  blown  into  Ihe 
interstices  of  Ihe  tower  with  mile  or  no  damage  to  the  internal 
parts  of  the  structure.  Stripped  of  its  Hiding,  the*  structure  tic* 
conics  a  drag  structure. 

The  transverse  timber  frames  between  the  center  and  rnd 
shear  walls  collapse  into  the  concrete  water  basin  at  3.5  psi. 
from  the  bending  failure  of  the  columns  and  the  failure  of  the 
wind  diagonals. 

The  frame  anchor  holts  fail  in  shear  st  1.5  psi,  causing  the  furnace 
to  be  shifted  on  its  foundation  and  causing  breakage  of  pipe  be  I  ween 
the  furnace  and  the  crude  unit.  At  i>,0  psi  the  stack  collapse  from 
plate  buckling  and  the  Tumaces  overturn  from  anchor  bolt  failure 
ot  8.5  psi. 


TAHU-:  3.11  PAKAMKTKKS  tJSKII  IN  Ml. AST  BAMAOK  ANALYSIS 


Cunt  rolhnuee 
(FCC  Until 

flat 

Cun' nil  nioiit 

Sw.  gear  iwm 
AM  room  a 

Steel  roof  deck 
Steel  roof  deck 
Block  walla 

Bending 

1  lend  i  nr 

faec  next  uheetl 

0.34  k 

0.4 1  k 

23.4 

12.« 

0.7H 

0.78 

C  ontrolhouae 
(Crude  t’nui 

Hbl 

All  ri.iomu 

J ’recant  i  •  tncrrte 
roof  piaiika 

Steel  roof  lira in« 

Hi  rk  walla 

Steel  frame 
fw/ wall*  *.  roof) 

Steel  frame 

Bending 

Beiding 

<*ee  next  aheetl 

f'olamti  111*11111111; 

Column  bending 

(J.lSk/ft 

1.83  k 

43.4  k 

2  ."7  k 

11.3 

10* 

« 

r.ft 

0.7R 

0.711 

1.0  K  0.3.1 

l.n  4.0,33 

|  Aiteiiduni  «r>'u 
!  Vacuum  tower 

•\t  tr.ii  h  pliH'  !>•  | 


KM\Mli)tMlnl 
I  Tower 


C»nr.  irmni- 
Ve**e|  A.  It 
i  Vi*n*»l  A  .  11. 
j  Vviaitl  A.  B. 
Veaaet  A. 


Cone.  fram** 
Veaael  A  II. 


('*»|iinin  |i«*n<lli»K 
Ten a He  failure 
Shrill  fin  lure 
Ten*  lie  future 
Shear  failure 


I  reward  <•<>!*»,  Ini-kSt  (l.*\V  bunt 

t.eewaed  c>>U,  buckle  (U  -i;bUnt 
TmihI(  fnll'ir i*  I  l:  nr  VI  hunt) 
Connection  wrlila  full  | 

I  .reward  vuU.  buckle  )  ...  ... 
In!  interior  ml*,  liuckU*  »  , 

Vena  lie  failure  / 

I  reword  cola.  buckle  A  ...  .. 
I»l  interior  cola,  buckle l  ,  .*  * 
Triwil*  failure  J  "‘a'M 

Shear  failure  of  weldment  m 


Column  t  tending 
Ten*  tie  fotlure 


[  Tenaile  failure 
j  I'nlumn  bend  mg 
Tenmle  failure 
I  Tennile  failure 


.nan  f»ll  utlll  I  Wan*. I  A  II.  |  TrnaiU  failure 


I  Steel  frame 
|  I'  ranu*  A.  II. 

I  Frame  brae  In# 
Vi. anal  A.  II, 


Column  bending 
Wind  bra  eng  failure 


Furnace*  Aimoapherlc  A  FeanieA.il. 

vacuum  Frame  A  H 

(61  *«>•■ 


Timilr  fal Inn 
Shear  failure 
I’loie  buckling 


Source:  Advance  Berea r eh,  Inc. 


I 


Hemarka 


Corrugated  aabraloa  aiding  ahailer*  at  0.1  pal.  allowing 
roof  to  aurvive  until  collapa*  of  fr«m*.  The  Imilding  frama 
deform  a  at  '1.0  pat,  wiih  ihe  rm(  and  walla  intact.  The 
frame  la  null  alandmg  Imt  aeverely  deformed  when  tirlck 
walla  collapae  at  i.O  pai.  Kramr  and  roof  catlap**  at  *1.0 pal. 


Tower -aujiliorfed  V  la  re  With  the  Maat  aipiarrl*  uriented  t<» 
TRr T.wer,  the'Tower  ovrrturna  at  I.H  |»*l  Ii>  the  truckling  <■( 
(he  | w.i  leeward  'nlumna  an>l  the  uplifting  of  the  windward 
foolmga,  With  the  tilaat  diagonally  oriented  to  the  tower,  the 
tower  overturn*  at  .1.0  pal  with  the  uplifting  of  the  windward 
and  the  buckling  of  the  lerward  column. 


II. 0 


r.uye.|  Clare1  Tlie  reaiatanre  of  the  pina  and  th«  guy*  are 
nTwiTTar)Tto» ever,  the  pin*  fall  in  «heer  before  the  guys  fail 
Hi  trnaiun  twcauae^t*  ■  Jh  for  tenaile  failure. 
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At  1 1 .0  pal  the  upper  collar  pin  on  the  windward  anle  fail* 
in  atifar  resulting  in  the  ■•■llapae  -if  the  flare  ahoirw  it,e 
middle  foliar.  \'  11.0  pai,  the  up|w>r  and  lower  collar  pina 
fall  In  *lie.»r  resulting  in  the  « lonplrte  oilUpar  of  the  stark. 
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3.  8  Fire  damage 

At  a  refinery,  the  nature  of  fire  due  to  thermonuclear  attack  is 
similar  to  that  of  a  "normal"  preattack  fire  with  some  special  conditions 
superimposed,  namely  fallout,  thermal  radiation,  and  extensive  blast 
damage.  Normal  firefighting  activities  may  be  quite  severely  restricted 
by  the  arrival  of  fallout,  as  discussed  below  in  section  3,  9. 

The  amount  of  fuel  stored  and  in  process  in  a  refinery  varies  roughly 
in  proportion  to  the  size  of  the  refinery.  At  the  Baton  Rouge  refinery, 
production  is  334,000  b/d,  and  fuels  in  storage  tanks  amount  to  a  one-day 
supply.  At  any  given  time,  the  amount  of  fuel  in  process  in  the  crude 
units  is  much  smaller.  Ideally,  in  shutdown,  the  units  will  be  entirely 
emptied  of  fuel,  but  with  a  rapid  shutdown  some  fuel  may  be  left  in  the 
units. 

The  extent  of  fire  damage,  once  started,  is  governed  primarily  by 
the  amount  of  fuel  in  process  or  storage.  The  likelihood  of  a  fire  start¬ 
ing  in  case  of  attack  damage,  is  much  greater  for  an  operating  unit. 

Because  of  the  quantity  of  fuel  processed  in  the  refinery,  and  the  likelihood 
of  fire,  the  greatest  fire  hazard  is  to  be  found  in  operating  processing  units. 
However,  little  or  no  fire  hazard  exists  in  units  which  have  been  properly 
shut  down.  In  this  case,  the  fire  hazard  only  exists  at  the  storage  units. 

On  the  other  hand,  damage  to  storage  units  would  be  much  less  serious  to 
the  refinery  operations  than  the  loss  of  processing  units,  since  storage  is 
somewhat  interchangeable,  may  not  be  essential  to  operation,  and  can  be 
much  more  easily  reconstructed  or  repaired. 

For  one  weapon,  the  sequence  of  events  is:  first,  the  detonation, 
accompanied  by  the  formation  of  the  fireball  and  the  shock  front;  second  the 
emission  of  infrared  thermal  radiation  from  the  fireball  for  the  duration  of 
its  existence;  and  third,  blast  damage  caused  by  the  blast  wave.  The  initial 

i 

thermal  radiation  could  provide  some  additional  ignition  sources  around  the 
plant.  Some  thermal  radiation  can  arrive  at  a  refinery  after  the  blast  wave, 
although  not  in  sufficient  quantities  to  cause  ignition  of  spilled  liquids  and 
vapors,  since  much  less  energy  is  present  after  the  blast  for  the  overpressures 
considered  important  here.  This  is  further  analyzed  in  section  3.  1. 
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Significant  major  differences  in  the  repair  problem  are  associated 
with  the  question  of  whether  or  not  ignition  occurs.  In  the  Whiting, 
Indiana  disaster,  if  no  ignition  had  occurred  there  would  have  been  a 
tremendous  spillage  of  petroleum,  but  no  fire.  In  the  opinion  of  those 
who  investigated,  the  ignition  was  caused  by  sparks  from  the  impact 
of  a  piece  of  metal  striking  and  piercing  a  tank. 

The  problems  of  repair,  depend  upon  the  nature  and  duration  of  the 
fire.  Generally,  an  operating  unit  which  has  been  exposed  only  to  blast 
damage  is  repairable  after  sustaining  relatively  severe  damage.  For 
example,  large  reactor  towers  have  been  dropped  in  the  course  of  con¬ 
struction,  and  it  has  been  possible  to  straighten  them  out,  raise  them 
again,  and  put  them  into  operation.  However,  a  fire  at  the  base  of  one 
of  these  towers  would  weaken  the  steel  of  the  vessels  themselves 
seriously  and  prevent  their  reuse.  In  short,  the  presence  of  a  major 
fire  at  a  particular  location  in  a  refinery  can  make  the  difference  be¬ 
tween  an  easy  or  possible  repair  operation  and  circumstances  under 
which  it  would  be  simpler  to  reconstruct  the  unit  completely. 

Combustible  liquids  are  generally  in  storage  tanks  individually 
surrounded  by  dikes  designed  to  contain  at  least  half  of  the  volume 
of  the  tanks  inside  them.  Hence,  the  excessive  spread  of  fires  from 
flooding  is  not  likely.  An  exception  is  the  Pascagoula  refinery,  which 
is  discussed  in  section  3.  7. 4.  2. 

A  brief  discussion  of  the  physics  and  chemistry  of  the  fire  problem 
at  a  refinery  in  the  environment  of  a  nuclear  attack  is  given  in  the  following 
section. 

3.  8.  1  Physical  and  chemical  aspects 

Three  things  are  required  to  cause  fires:  fuel,  air  or  oxygen, 
and  an  ignition  source.  Technically,  fires  do  not  occur  in  liquids,  but  in 
their  vapors.  Hence,  the  temperature  of  potential  ignition,  the  flash  point 
of  the  liquid,  the  temperature  at  which  appreciable  quantities  of  the  vapor 
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are  present,  is  quite  significant,  A  higher  temperature  at  which  the  fuel 
gas  will  ignite  spontaneously,  the  autoignition  temperature,  is  also  quite 
important. 

Some  controversy  exists  over  the  exact  value  of  this  temperature, 

62 

since  it  depends  to  some  extent  on  the  technique  used  for  measuring  it. 

55  56 

The  temperatures  listed  in  table  3,12  '  are  generally  derived  from 

large  area  combustion  tests,  and  represent  minimum  temperatures  and 
optimum  mixtures  with  air  under  essentially  steady  flow  conditions.  In 
the  table,  the  broad  minimum  near  t0  characteristic  of  many  of 

the  heavier  hydrocarbons  present  in  crude  oil,  should  be  noted.  More 
information  on  these  characteristics,  and  the  exact  conditions  of  measure¬ 
ment  are  given  in  references  55  and  56. 

To  simplify  the  table  greatly,  petroleum  gases  released  from  pro¬ 
cessing  units  and  exposed  to  air  at  temperatures  above  their  autoignition 
temperatures,  possibly  from  breakage  of  pipes  due  to  nuclear  blast,  will 
undoubtedly  ignite  without  another  ignition  source.  On  this  account, 
released  liquids  and  vapors  at  temperatures  above  the  flash  points  represent 
a  severe  hazard  to  a  refinery  because  there  are  many  ignition  points, 
particularly  furnaces  and  flares.  The  heat  content  of  the  fluid  at  the  auto¬ 
ignition  temperature  is  the  amount  of  heat  energy  which  must  be  added  to 
the  fluid  to  cause  it  to  ignite  spontaneously.  This  could  theoretically  be 
used'Tcr-determine  the  hazard  to  liquids  exposed  to  the  thermal  radiation 
from  a  nuclear  weapon.  A  gram  of  the  material,  absorbing  the  specified 
quantity  of  energy  would  reach  its  autoignition  temperature,  and  ignite,  in 
the,  presence  of  air. 

In  the  event  of  a  nuclear  attack,  the  sequence  of  events  noted  above 
in  the  lower  blast  overpressure  range,  would  involve  thermal  radiation 
arriving  first,  followed  by  the  blast  wave,  and  then  more  thermal  radiation 
of  much  less  intensity  continuing  for  a  period  of  up  to  a  minute.  Few 
petroleum  fuels  in  a  refinery  would  be  exposed  to  air  and  thermal  radiation 
prior  to  the  arrival  of  the  blast  wave.  On  the  other  hand,  many  could  be 
exposed  as  a  result  of  the  blast.  Some  fuels  might  be  ignited  by  metal-to- 
metal  impact  as  a  result  of  the  blast  wave;  it  is  doubtful,  however,  that 
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Table  3.  12 


SIGNIFICANT  TEMPERATURES  ASSOCIATED  WITH _ 

FIRE  HAZARDS  IN  STRAIGHT  CHAIN  HYDROCARBONS33'0 


Compound 

Au;oigniti*»n 

Flash 

Heat  content  at 

autoiynilion 

i  mpe nature 

point 

(related  to 

100°F) 

Methane 

(Ci) 

999°F 

-305°F 

701  -  BTU/lb 

391  Cal/gm 

Ethane 

(c2) 

959 

-202° 

560 

311 

Propane 

<c3) 

871 

-152° 

575 

319 

n-  Butane 

(C4) 

761 

-  96° 

410 

228 

n- Pentane 

<C5> 

496 

-  54° 

255 

142 

n- Hexane 

(c6) 

433 

-  15° 

— 

— 

n- Heptane 

(C7) 

433 

25° 

— 

— 

n- Octane 

(C8) 

428 

56° 

— 

— 

n*  Dodecane 

(cl2) 

399 

165° 

— 

— 

n-Hexadecane 

(C16> 

•01 

259° 
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enough  thermal  radiation  would  arrive  after  the  blast  to  represent  a  significant 
hazard  to  fuels  exposed  by  blast  damage. 

For  example,  a  10- MT  weapon,  at  optimum  burst  height,  will  yield 

47 

5.  0  psi  overpressure  at  9.  3  miles.  The  blast  wave  will  arrive  in  about 

2 

39  seconds.  Of  the  70  cal/ cm  radiated  from  the  fireball  at  that  radius, 
given  near-perfect  visibility,  almost  90  percent  would  have  arrived  prior 
to  the  blast  wave.  This  only  leaves  7  cal/ cm  to  arrive  after  the  wave,  and 
the  rate  of  arrival  would  be  quite  slow,  further  reducing  the  incendiary  effect. 
For  autoignition,  at  least  142  calories  per  gram  are  required.  Since  the 
volume  of  a  gram  of  liquid  product  is  a  little  more  than  a  cubic  centimeter, 
it  seems  unlikely  that  sufficient  energy,  at  7  cal/cm  ,  could  be  absorbed  to 
cause  ignition  of  any  petroleum  vapors.  Further  analysis  is  indicated. 

Propane  and  butane  are  gases  at  ambient  temperatures  and  pressures, 
but  are  liquids  under  the  high  pressures  existing  within  pressure  storage 
tanks.  Physical  damage  to  one  or  more  tanks  could  result  in  the  rapid  spread 
of  inflammable  vapors  over  large  areas  of  the  plant.  Methane  is  lighter  than 
air.  ethane  (ethylene,  acetylene)  is  very  close  to  the  density  of  air,  but  all 
other  hydrocarbon  gases  are  heavier  than  air  and  are  therefore  particularly 
hazardous,  because  they  do  not  dissipate  but  spread  along  the  ground. 

Ignition  sources  exist  at  many  locations  within  the  plant,  primarily  at 
furnaces,  electrical  equipment  and  flares,  and  when  these  fuels,  mixed  with 
air.  reach  the  source  of  ignition,  a  conflagration  usually  results.  If  such 
gases  had  ignited  at  their  source,  a  lesser  hazard  would  have  resulted, 
since  the  fire  might  have  been  more  localized. 

In  almost  all  cases,  the  petroleum  liquids  inside  the  processing  units 
are  at  temperatures  exceeding  their  flash  point,  and  rupture  of  one  of  these 
vessels  is  potentially  very  serious.  Even  below  the  autoignition  temperature, 
a  flammable  mixture  of  air  and  fuel  will  probably  come  into  contact  with  a 
source  of  ignition  and  ignite.  The  gaseous  detonation  at  the  Whiting,  Indiana 
refinery  hydroformer,  described  below,  resulted  from  such  a  mixture. 
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Table  3.  13  gives  some  representative  temperatures  and  pressures 
present  within  certain  operating  units.  In  many  of  these  units,  the  tem¬ 
peratures  are  above  the  autoignition  temperature  of  the  fuels  and  breakage 
of  pipes  by  blast  would  result  in  an  immediate  fire.  Fires  could  also  be 

started  by  sparks  generated  during  the  blast  by  the  friction  between  pieces 

54  64 

of  metal,  as  noted,  and  from  electrical  sources.  ' 

In  studying  this  problem,  the  examples  of  actual  fires  which  have 
taken  place  are  useful,  because  the  damage  from  these  fires  does  not  differ 
appreciably  from  that  which  could  be  expected  to  be  caused  by  nuclear 
weapons. 

Examples  of  such  disasters  are  the  following: 

1)  The  fire  at  the  Whiting,  Indiana,  refinery  of  American  Oil 
Company  in  1955,  caused  by  a  detonation  in  the  reactor  of 
the  fluid  hydroformer. 

2)  The  oil  froth  fire  at  the  Signal  Hill,  California,  refinery 
of  Hancock  Oil  Company  in  1958. 

3)  The  explosion  at  Texas  City,  Texas  in  1947,  when  two 
ships  exploded  in  the  harbor  showering  missiles  and 
debris  onto  petroleum  storage  tanks,  refinery  process 
equipment,  and  the  Monsanto  Chemical  Plant. 

4)  The  earthquake  at  the  Kenai,  Alaska,  refinery  of  Standard 
Oil  Company  of  California  on  March  27,  1964, 

5)  The  earthquake  at  the  Niigata,  Japan,  refinery  of  Showa  Oil 
Company  on  June  16,  1964. 

Of  the  above,  1  and  2  are  discussed  in  this  section;  item  3  in  section 
3.  7;  and  items  4  and  5  in  section  3.  10. 

o  o  o  •  45,  54,  57,  58 

3.8.2  Whiting  experiences 

The  Whiting  fire,  on  August  27,  1955,  started  with  a  detonation 
in  a  fluid  hydroformer  unit.  The  unit  was  being  brought  on  stream  following 
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Table  3.  13 


R  E  P R  ESEN T ATI  V E  OPE  R  ATI  NO  T  E M  P K  R  A T  U  R  ES 
PRESENT  IN  SELECTED  UNITS 


Unit 

Operating 
temperature 
(maxi  mum) 

Pressure 

Atmospheric’  Crude  Unit 

6  <  a  !• 

► 

Vacuum  Pipe  Still 

800°F 

Vacuum,  »  2  psia 

Fluid  Cat  Cracker  Unit 
Reactor 

920° 

30  psig 

Regenerator 

920 

10  psig 

Fluid  Hydroformcr 
(Whiting  Unit) 

940°F 

225  psig 

Ultraformer 

920°F 

150  psig 

Debutanizer 

2 12°F 

120  psig 

Alkylation  Unit 

35-40°F 

150- 175  psig 
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a  turnaround,  but  had  not  yet  reached  full  operating  temperature.  An 
undetected  air  leak  occurred  between  the  regenerator  and  reactor  via  the 
catalyst  circulating  lines,  when  a  valve  failed  to  close.  Since  the  tempera¬ 
ture  was  below  the  autoignition  point  (about  350°!''),  the  air  circulated 
throughout  the  unit  prior  to  explosive  mixture  detonation  in  the  furnace. 

F  After  several  hours,  enough  air  had  leaked  into  the  unit's  recycle  gas  system 

to  form  a  flammable  mixture  with  the  inert  gas  and  naphtha  vapor  present 
there.  Ignition  probably  occurred  in  the  furnace  tubes  developing  into  a 
detonation  which  shattered  the  2-1 /2-inch-thick  walls  of  the  reactor,  sending 
missiles  flying  throughout  the  refinery  for  a  distance  up  to  a  quarter  of  a 
mile. 

The  sequence  of  events  which  led  to  tile  detonation  constitutes  an 
ever-present  hazard  under  conditions  of  emergency  shutdown.  The  danger 

would  be  particularly  severe  if  a  blast  wave  arrived  during  the  process  of 

,  ...  .  59,  60,  61 

shutting  down  a  unit. 

The  damage  resulting  from  this  detonation  consisted  of  total  destruction 
of  the  reactor  and  the  regenerator  of  the  fluid  hydroformer  unit,  roof  and 
wall  collapse  at  the  controlhouse,  extensive  damage  to  piping,  but  relatively 
little  damage  to  other  adjacent  vertical  towers  in  the  unit  (see  figures  3.  15 
and  3.  16).  The  600-ton  reactor  unit  broke  into  13  major  size  pieces;  one 
60-ton  fragment  traveled  1200  feet.  Other  blast  damage  included  broken 
glass  and  damage  to  some  houses  outside  the  refinery. 

With  the  exception  of  the  fluid  hydroformer  unit  and  one  naphtha  tank, 

no  units  would  have  required  scrapping  due  to  the  blast  damage  alone. 

Most  of  the  total  damage,  estimated  at  more  than  $10  million,  occurred  as 

a  result  of  the  fire,  caused  by  the  missiles.  The  total  valuation  of  the 

refinery  approximated  $350  million,  so  the  extent  of  damage  could  be  ex- 
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pressed  as  between  three  and  four  percent. 

Missiles  caused  the  immediate  fire  in  the  storage  tanks  to  the  north 

of  the  fluid  hydroformer.  Ignition  of  the  oil  was  thought  to  have  been 

5 

caused  by  sparks  from  metal -to -metal  impact.  About  20  tanks  were 
pierced  and  immediately  ignited,  and  the  fire  ultimately  spread  over  47 
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acres.  Once  started,  the  spread  of  the  fire  resulted  from  tanka  boiling 
over,  and  spillage  that  could  not  be  contained  in  dikes. 

Firefighting  strategy  was  to  contain  the  conflagration,  rather  than 

try  to  extinguish  it,  which  would  have  been  impossible  for  such  a  large 

fire.  Sand  was  brought  in  for  diking,  and  water  streams  used  for  cooling. 

On  the  second  day  the  burning  area  began  to  decrease,  but  it  took  eight 

days  for  the  fire  to  burn  itself  out.  Although  85  days  were  required  to 

restore  the  refinery  to  full  crude  capacity  operation,  production  reached 
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50  per  cent  of  capacity  less  than  four  weeks  after  the  start  of  the  fire. 
Storage  tankage  lost  in  the  fire  was  replaced  in  another  location  five  to 
eight  months  later.  The  fluid  hydroformer  unit  was  never  rebuilt. 

Another  unit,  an  ultraformer,  was  added  later,  coming  on  stream  for  the 
first  time  11  months  after  the  fire.  A  production  re  .very  chart,  showing 
the  time  required  to  resume  full  operation  after  the  fire,  is  given  in  figure 
3.17,  and  is  indicative  of  postattack  recovery  time  after  a  serious  tank 
fire.  Conclusions  to  be  drawn  from  the  Whiting  fire  are: 

1)  The  fluid  hydroformer  unit  explosion  might  be  duplicated 
under  some  conditions  of  blast  wave  arrival  during  shut¬ 
down.  The  conditions  required  would  include  breakage 
of  pipes  or  valves  at  some  locations  which  would  permit 
air  to  enter  the  system;  presence  within  the  unit  of  flam¬ 
mable  vapors  below  their  autoignition  temperature;  the 
development  of  an  explosive  mixture  circulating  within 
the  unit,  and  its  ignition. 

2)  Considerable  damage  to  storage  units  can  occur,  but 
loss  of  production  depends  primarily  on  the  extent  of 
damage  to  operating  units. 

3)  Advance  planning  and  training  of  personnel  for  emergencies 
as  was  done  at  Whiting  can  do  much  to  reduce  loss  of 

life  and  property  and  contribute  to  efficiency  of  action 
in  a  disaster. 

4)  Tank  fields  should  be  separated  from  process  areas. 
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The  Fluid  Hydroformer  Before  the  Explosion 


Figure  3.15 
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Figure  3.17  Recovery  of  production  following  the  1955 
Whiting  fire  45 


5)  Tmks  should  he  adequately  spaced,  and  each 
tank  should  be  individually  diked  with  no  drains 
or  connections  through  dikes. 

6)  If  a  tank  fire  cannot  be  extinguished,  at  least 
it  must  be  contained. 

7)  Missile  damage  from  blasts  is  more  of  a  hazard 
to  storage  tanks  than  to  process  units. 

3.8.3  Signal  Hill6D 

This  fire  started  from  an  oil  froth  wave  (or  boilover)  which 
emanated  from  a  residual  oil  storage  tank.  The  tank  was  normally  main¬ 
tained  at  300°F  by  a  hot  stream  of  residual  bottoms  coming  from  the 
straight-run  unit  fractionating  tower  of  20,000  b/d  capacity.  Part  of  this 
stream  was  diverted  to  the  tank  in  question,  and  the  rest  went  to  the  thermal 
cracking  unit.  There  were  no  steam  coils  in  the  tank.  On  the  morning  of 
the  fire,  the  temperature  in  the  tank  was  315°F.  The  cause  of  the  oil  froth 
is  not  definitely  known.  It  may  have  resulted  from  a  layer  of  water  in  the 
bottom  of  the  tank  becoming  overheated,  a  sudden  disturbance  of  the  water, 
or  by  pumping  water  into  the  tank  by  mistake.  The  tank  capacity  was 
80,000  barrels,  and  was  filled  to  about  50,000  barrels.  It  had  a  cone  roof 
and  a  diked  area  capable  of  retaining  75  to  100  percent  of  the  tank's  capacity. 
Because  froth  volume  far  exceeds  the  volume  of  the  oil  from  which  it  is 
derived,  the  oil  froth  wave  eventually  spread  out  over  an  area  of  about  27 
acres.  It  did  not  ignite  at  first,  but  a  second  froth  wave  about  8  or  10 
minutes  later  did  ignite,  spreading  burning  oil  from  both  waves  throughout 
the  processing  area  and  into  storm  drains. 

There  was  no  time  to  shut  down  processing  equipment,  but 
depressurizing  took  place  because  of  pipeline  failures.  There  was  no 
serious  damage  to  major  structures  in  the  process  areas,  but  piping,  wiring, 
and  instruments  were  extensively  damaged.  Insulated  and  fireproofed 
supports  remained  relatively  undamaged,  but  unprotected  steel  buckled. 
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Within  two  hours  the  fire  had  been  extinguished  everywhere 
except  in  the  tank  farm  section  where  it  lasted  40  hours.  The  tetraethyl 
lead  weigh  tank  building  was  dangerously  exposed,  but  no  damage  was  sus¬ 
tained  at  the  building  or  at  the  tetraethyl  lead  tank  where  water  was  used 
to  reduce  the  heat.  The  storage  tanks  did  not  have  fixed  foam  chambers, 
but  many  were  protected  by  water  streams,  and  foam  was  used  in  the  diked 
areas.  The  damage  amounted  to  $9  million,  of  which  about  half  was  outside 
the  refinery.  An  interesting  aspect  of  this  fire  is  the  relatively  mild 
damage  suffered  by  major  processing  structures.  Most  of  the  damage 
was  to  storage  tanks,  piping,  and  instruments. 

3.  8.  4  Firefighting  methods 

Firefighting  facilities  presently  installed  at  a  refinery  are 
generally  inadequate  in  extinguishing  a  widespread  fire  in  a  tank  farm 
and  operating  units  as  a  result  of  an  attack.  Outside  assistance  will 
certainly  be  required  in  such  circumstances.  Nevertheless,  fires  started 
by  an  attack  of  the  same  magnitude  as  those  heretofore  experienced  by 
refineries  could  be  combatted  with  existing  firefighting  equipment,  supple¬ 
mented  by  outside  help  from  local  fire  stations. 

The  methods  and  equipment  currently  used  in  fighting  refinery 
fires  are,  as  follows: 

1)  Application  of  foam. 

2)  The  use  of  water  to  cool  threatened  steel  equip¬ 
ment  and  retard  the  spread  of  fire. 

3)  Removal  of  the  burning  liquid. 

Supplementary  methods  are  carbon  dioxide  extinguishers  and 
fog  nozzles.  Air  agitation  is  sometimes  used  for  storage  tanks  in  some 
services,  but  this  is  not  applicable  everywhere  or  universally  accepted. 

The  foam  is  a  mixture  of  a  foaming  agent  and  water,  containing 
carbon  dioxide  gas  trapped  in  the  form  of  bubbles.  It  floats  on  the  surface 
of  a  burning  liquid,  excluding  air,  and  thus  smothers  the  fire. 


; 

i 


i 
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Some  storage  tanks  have  foam  pipes  attached  to  their  sides 
with  foam  chambers  for  inserting  the  foam  into  the  tank  interior  mounted 
high  up  on  the  tank's  walls.  Pipes  are  run  from  a  connection  outside  the 
dike,  through  the  dike  to  the  foam  chamber.  In  ease  of  fire  a  foam  truck 
is  brought  to  the  scene,  and  one  line  from  the  foam  truck  is  attached  to 
this  connection  while  another  is  connected  to  the  nearest  water  hydrant. 

Other  tanks  have  no  foam  chambers  or  piping,  and,  for  these, 
foam  towers  are  erected  next  to  the  burning  tank.  The  foam  tower  must  be 
brought  to  the  site  with  the  foam  truck  and  connected  in  the  same  manner  as 
if  there  were  a  foam  chamber  and  fixed  piping.  The  height  of  the  foam 
tower  is  varied  either  by  a  section  of  telescoping  tubing  and  a  hydraulic 
extending  mechanism,  or  by  the  pressure  of  the  foam  itself. 

Opinions  of  the  effectiveness  of  foam  systems  vary.  It  is 

most  effective  for  two-dimensional  fires,  where  the  liquid  and  fire  are  on 

a  single  plane.  For  three-dimensional  fires,  complicated  by  a  stream, 

flow  or  free  vapor,  foam  is  not  particularly  effective  and  the  way  to  fight 

6  6 

the  fire  is  by  removing  the  fuel  or  letting  it  burn  itself  out.  Removal 
of  fuel  usually  means  closing  a  valve  to  interrupt  the  flow,  then  waiting 
for  the  fire  to  consume  the  remaining  fuel  and  thus  put  itself  out.  Another 
possibility,  in  connection  with  storage  tanks,  is  to  pump  the  liquid  out  of 
the  tank  into  a  slop  tank. 

The  use  of  water,  or  quenching,  essentially  removes  heat 
from  the  fire.  The  most  effective  equipment  are  turret  nozzles,  which 
are  located  in  key  spots  through  the  refinery,  and  can  be  put  in  operation 
by  one  man  and  left  unattended  thereafter. 

Air  agitation  is  sometimes  used  in  fighting  tank  fires  in  con- 

6  7 

junction  with  foam,  although  opinions  vary  as  to  its  usefulness.  Its 
use  is  based  on  the  fact  that  petroleum  products  or  crudes  will  burn  only 
when  flammable  vapors  and  air  are  present  about  the  surface  of  the  liquids 
in  the  correct  proportions: 
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FLAMMABLE  LIMITS 
IN  AIR  Rn 
PERCENTAGE0 


(by  volume) 


Lower 


Butane 

1.  9 

Carbon  Monoxide 

12.  5 

Gasoline 

1.  4 

Hydrogen 

4.  0 

Kerosene 

0.  7 

Propane 

2.  2 

Upper 

.  Flash  Point 
°F. 

Closed  Cup 

8.  5 

-76 

74.  0 

gas 

7.  6 

-50 

75.  0 

gas 

5.  0 

115-150 

9.  5 

gas 

A  change  outside  these  limits  will  extinguish  the  fire.  It  is 

most  effective  if  the  surface  temperature  of  the  liquid  can  be  reduced  below 

the  flash  point.  Air  agitation  rates  vary,  depending  on  viscosity,  from 
2 

2  to  8  cfm/100  ft.  of  liquid  surface,  for  50  centistokes  or  less,  to  to  25 
2 

cfm/ 100  ft.  of  liquid  surface  for  more  viscous  liquids. 

In  crude  oil  fires,  there  is  a  heat  wave  which  travels  toward 
the  bottom  of  the  tank  as  the  fire  progresses.  If  a  water  bottom  is  present, 
this  will  cause  a  "boilover"  when  the  heat  wave  reaches  the  water  and  causes 
it  to  "flash"  to  steam.  Air  agitation  can  cause  a  boilover  by  mixing  the 
water  with  the  hot  oil  and  causing  it  to  turn  to  steam.  When  foam  is  applied, 
on  the  other  hand,  a  "slopover"  can  occur,  but  air  agitation  will  prevent  this 
by  mixing  and  cooling  the  hot  surface  layer.  Boilover  can  be  prevented  by 
starting  the  air  agitation  at  a  low  rate  and  gradually  increasing  it. 

Air  agitation,  based  on  tests  made  by  Creole  Petroleum  Company, 

is  most  effective  at  oil  depths  ranging  from  full  tank  to  six  feet,  while  oil 
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depths  from  six  to  three  feet  require  progressively  more  air.  At  depths 

of  less  than  two  feet  of  oil,  it  is  essentially  useless.  It  alone  can  extinguish 
fire  only  if  the  liquid  temperature  at  the  surface  drops  below  the  flash  point. 
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It  can  also  be  used  to  hold  fires  in  low  flash  products  such  as  gasoline, 
jet  fuel,  or  crudes  at  reduced  intensity  for  long  periods  of  time,  thereby 
reducing  the  hazard  and  the  damage  to  equipment. 

High  explosives  are  regularly  and  successfully  used  to  extinguish 
oil  fires,  in  the  case  of  flowing  oil  wells.  The  technique  involves,  first, 
the  removal  of  any  hot  metal  pieces  from  the  vicinity  of  the  fire,  using  a 
crane,  to  prevent  reignition.  Next,  the  explosive  is  detonated  to  blow 
out  the  fire.  Finally,  the  well  is  capped  and  the  combustible  liquids  are 
removed.  Explosives  are  not  often  used  in  refinery  fires. 

3.8,5  Fire  conclusions 

1)  An  operating  refinery  will  probably  burn  and 
destroy  itself  at  levels  of  blast  which  cause 
pipe  breakage  at  approximately  5-7  psi. 

2)  Thermal  radiation  presents  slight  additional 
hazard.  Ignition  sources  present  are  sufficient 
to  cause  a  major  fire.  Fires  could  be  worse 
in  some  cases  if  ignition  is  delayed.  A  few 
additional  ignition  points  might  result  from 
thermal  radiation,  at  the  few  places  where 
petroleum  vapors  might  be  exposed  to  both 
air  and  the  thermal  radiation.  Thermal 
radiation  hazards  merit  further  investigation. 

3)  Fire  hazard  to  a  shut  down  refinery  exists 
primarily  in  storage  tank  areas.  Such  a  fire, 
if  it  can  be  contained  in  the  tank  areas,  would 
not  result  in  the  extreme  repair  problem  of 
the  damage  to  controlhouse  instrumentation 
or  damage  to  operating  units. 
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3.  D  Fallout 


Fallout  is  essentially  a  hazard  to  personnel,  rather  than  to  crude 
oil  or  products,  and  the  anticipated  problems  involved  in  refining  clean- 
up  of  contamination  are  covered  in  arior  studies.  '  The  danger  to 
personnel  could  result  in  a  too- hasty  shutdown,  or  no  shutdown  at  all,  in 
the  face  of  imminent  arrival  of  fallout.  If  this  happened,  improper  shut¬ 
down  could  account  for  considerable  damage  at  the  refinery,  even  in  the 
absence  of  blast  or  thermal  radiatioi  damage.  The  potential  value  of 
adequate  fallout  shelter  protection,  at  least  for  essential  shutdown  per¬ 
sonnel,  requires  little  additional  justification. 

Shelter  a~eas  could  be  provided  in  the  administration  buildings  at 
refineries.  If  there  is  a  basement,  it  is  possible  to  construct  a  shelter 
capable  of  withstanding  an  overpressure  of  3.  5  psi,  in  addition  to  the 
partial  collapse  loads  of  the  floors  above  it,  or  5.  5  psi  if  there  is  no 
collapse  of  the  floors  above  (see  reference  69).  In  the  event  there  is 
no  basement  in  the  building,  as  might  be  the  case  in  an  area  where  ground 
water  is  a  problem,  it  is  anticipated  that  interior  corridors  in  the  middle 
floors  of  the  building  may  provide  fallout  protection  factors  of  100  or  better. 
No  stocked,  marked  fallout  shelters  were  found  at  any  of  the  refineries 
visited. 

3.10  Refinery  shutdown  and  startup 
3.  10.  1  General  discussion 

Assuming  a  labor  force  that  is  adequate  both  in  numbers  and  in 
degree  of  shutdown  training,  the  extent  of  shutdown  will  depend  on  the  time 
allotted  to  it— probably  determined  by  the  amount  of  warning  time  — or  on 
estimates  of  the  probability  of  attack  directed  at  the  particular  refinery  or 
its  vicinity,  or  a  combination  of  both. 

Warning  time  could  range  from  as  little  as  15  minutes  up  to 
days  or  even  weeks.  Shutdown  operations  should  be  performed  on  a  pre¬ 
planned  "first  things  first"  basis,  and  even  15  minutes  will  permit  a  few 
important  steps  which  could  conceivably  avoid  widespread  destruction  as 
occurred  at  Niigata,  Japan,  in  the  June,  1964  earthquake,  described  below. 
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There  is  at  least  one  example  of  virtually  immediate,  no-warning 
shutdown,  afforded  by  the  experience  of  the  Baton  Rouge  refinery  of 
Humble  Oil,  also  described  in  this  chapter. 

If  there  were  as  much  as  4  hours  warning  time,  a  relatively 
normal  shutdown  could  be  accomplished.  At  the  Whiting  fire,  for  ex¬ 
ample,  this  was  done  in  spite  of  the  major  fire  developing  nearby.  The 
fluid  cat  cracker  was  put  through  a  safe,  orderly  shutdown,  over  the 
course  of  several  hours.  ^ 

Fire  is  frequently  a  secondary,  or  indirect,  effect  of  blasts  of 
all  kinds,  and  fire  damage  would  probably  be  much  less  in  the  case  of  a 
shutdown  refinery  than  in  the  case  of  an  operating  one.  The  quantities 
of  volatile  substances,  under  conditions  of  high  temperatures  and  high 
pressures  in  furnaces,  catalytic  cracking  reactors,  regenerators,  and 
light  ends  fractionating  towers  represent  a  considerable  fire  hazard 
under  normal  circumstances,  and  would  be  much  more  so  under  blast. 

A  shutdown  refinery  would  not  be  subject  to  these  conditions  and  would 
obviously  be  much  less  subject  to  fire  damage  following  blast. 

3.  10.2  Normal  shutdown  and  startup 

Normally  it  takes  several  hours  to  shut  down  a  processing 
unit,  because  lines  must  be  purged  with  steam  and  furnaces  should  be 
allowed  to  cool  gradually.  In  the  FCCU  Units  at  the  Baton  Rouge  refinery, 
for  instance,  shutdown  normally  requires  4  hours  to  prevent  coking  in  the 
furnace  coils.  Equipment  is  turned  off  and  emptied  in  a  predetermined 
sequence  and  flushed  out  with  steam  and  water  during  the  shutdown  period. 

Normal  startup  of  a  crude  unit  involves  leak  tests,  careful 
equipment  checks,  hydrostatic  testing  with  water  for  leaks  in  vessels,  and 
gradual  heating  with  light  oil  to  purge  air  from  the  system  to  avoid  the 
formation  of  explosive  mixtures. 

In  the  fluid  catalytic  cracking  units,  the  normal  shutdown 
involves  circulating  and  withdrawing  the  catalyst.  If  oil  were  lost  before 
the  catalyst  could  be  removed,  remedial  action  would  be  required  to  pre¬ 
vent  slumping  and  plugging  of  lines.  Steam  injection  automatically  cuts 
in  to  prevent  this  and  it  also  prevents  excessive  temperatures  in  the  reactor 
(normally  running  at  900°  -  950°F). 
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3.10.3  Rapid  shutdown 

Although  normal  shutdown  requires  several  hours,  an  operating 
refinery  ran,  it'  necessary,  bo  shut  down  in  a  iVa  minutes  and  tin.- re  are 
instances  when  this  has  happened.  Most  refineries  have  some  sort  of 
procedure  to  be  followed  in  an  emergency  ,f  processing  units  have  to  be 
shut  down  rapidly. 

*  . 

Probably  the  best  documented  example  of  a  rapid  shutdown  is  in 
Esso's  Report  on  Emergency  Shutdown. " 1  This  describes  the  power 
failure  at  Humble's  Baton  Rouge  refinery  on  April  29,  1960,  which  re¬ 
sulted  in  loss  of  steam  and  electric-  power  throughout  the  entire  refinery 
in  a  few  minutes.  The  power  failure  occurred  at  Gulf  States’ Louisiana 
station,  which  at  that  time  supplied  almost  all  of  the  refinery's  power 
and  steam  except  for  a  small  quantity  of  200  psi  pressure  steam  pur¬ 
chased  from  an  adjacent  chemical  plant  and  a  small  amount  of  power 
generated  at  the  refinery's  own  power  station. 

The  refinery's  own  power  station  picked  up  the  load  at  the  time 
of  the  failure  at  Gulf  States  but,  although  the  load  was  diminished  be¬ 
cause  of  some  equipment  kicking  out  on  low  voltage,  the  power  station 
was  overloaded  and  forced  to  shut  down.  Shutdown  of  refinery  pro¬ 
cessing  units  resulted  primarily  from  loss  of  air  pressure  needed  to 
operate  vital  instruments.  This  "instrument  air"  is  supplied  by 
several  electric  motor-driven  air  compressors  scattered  throughout 
the  refinery,  and  almost  all  operating  units  depend  on  it  for  the  con¬ 
trols,  As  previously  noted,  they  arc  designed  to  "fail  safe",  that  is 
to  operate  for  maximum  safety  following  air  failure.  Process  furnace 
fires  were  put  out  as  rapidly  as  possible.  Large  quantities  of  gas 
were  burned  in  flare  stacks  and  no  serious  injuries  or  fires  occurred 
and  no  injuries  to  personnel  resulted.  The  damage  to  refinery  equip¬ 
ment  was  surprisingly  small. 
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Thu  to'  >st  .>1'  the  shutdown,  including  lost  production  of 
products,  raw  ti  Is  flared "  (deliberately  burned),  losses  of  process 
chemicals,  and  .  ''-mical  damage,  has  been  estimated  at  slightly  over 
$1  million,  or  appr.  mutely  the  value  of  one  days'  supply  of  crude  oil, 

Since  water  was  supplied  by  electric  motor-driven  pumps,  there 
was  a  loss  of  water  for  processing,  cooling  towers,  and  firefighting. 
Although  a  tie-in  was  made  to  city  water  mains,  this  probably  would  not 
have  been  adequate  if  fire  had  broken  out. 

The  most  serioi  process  equipment  damage  happened  to  the 
pre-heat  furnaces  at  Xos.  1  and  2  catalytic  cracking  units,  and  the  fur¬ 
nace  at  the  No.  4  steam  cracking  unit.  Some  of  the  cyclones  at  No.  2 
catalytic  enn  ng  unit  were  plugged  with  coke,  and  excessive  catalyst 
losses  limitou  production  to  80%  of  normal,  for  several  weeks  following 
the  shutdown. 

Operations  were  resumed  gradually,  beginning  28  hours  after 
the  shutdown  with  the  operation  of  the  refinery  boilerhouse,  next  with 
the  large  pipe  'stills,  and  then  with  light  ends  units,  in  that  order. 

Other  instances  of  sudden  shutdown  have  been  analyzed  at  Creole 

Petroleum  Company  in  Venezuela  because  of  labor  stoppages,  and  for 

Bavtown  refinery  of  Humble  Oil  &  Refining  Company  in  connection  with 

38 

radioactive  fallout  following  a  hypothetical  attack.  It  was  assumed  the 
refinery  would  be  undamaged  by  blast  and  thermal  radiation  effects  of 
nuclear  explosion,  and  that  it  would  remain  shut  down  for  two  weeks. 
Table  3.14  summarizes  the  data.  Because  of  lines  plugged  with  cata¬ 
lyst,  the  catalytic  crackers  show  the  longest  period  (4  to  6  weeks)  of 
repair  prior  to  resumption  of  production.  This  estimate  is  in  direct 
contradiction  with  what  actually  happened  at  Baton  Rouge,  where  the 
three  catalytic  crackers  were  down  only  60,  141,  and  84  hours  respec¬ 

tively.  The  difference  can  be  explained  in  three  ways:  1)  the  fact  that 
at  Baton  Rouge,  personnel  stayed  on  the  job  and  may  have  been  able  to 
take  some  measures  which  prevented  most  of  the  catalyst  plugging  and 
furnace  coking,  whereas  it  was  assumed  in  the  Walter  Kidde  study,  that 
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Table  3.14 

STARTUP  AFTER  SHUTDOWN  DATA 

AT  BAYTOWN  REFINERY  ... 

HUMBLE  OIL  &  REFINING  COMPANY’8 

UNIT 

FEEDSTOCK 

STARTUP  ' 

!  After  emergency  shutdown 
and  2  week  idleness 

CRACKING  AND 
.  POLYMERIZATION: 

- 

Catalytic  Light  Ends 
•  Units  §  1  and  2 

light  ends  fractions 
from  catalytic 
cracking  units 

4-5  days  — check  heater, 

8  hrs,  :  pump  seals,  repair  refractory 

.  Catalytic  Light  Ends 
Unit  n 

gas  products  from 
fluid  catalyst 
cracking  units 

4-5  days  — repair  refactories 
36-48  hrs.  in  heater 

Catalytic  Polymer¬ 
ization  Unit 

olefinic  gases  from 
catalytic  light  ends 
units 

4-5  days  — check  furnace, 

:  repair  refactories,  clean 

12  hrs.  reactors  where  plugged, 

check  pumps,  recharge 
refrigerant 

Fluid  Catalytic 
Cracking  Units 
#1,  2,  and  3 

gas  oil  feed  from 
storage 

4-6  weeks  — disassemble, 

48-60  hrs.  clean  and  deplug  all  lines 
.  and  equipment,  replace 
catalyst 

LIGHT  ENDS: 

Alkylation  Unit 

olefin  gases  and 
isobutane  feed 
from  storage 

4-5  days  — recharge  reactors 
■  with  acid 

16-24  hrs. 

Light  Ends 
Fractionating  Unit 

treated  feed  stock 
from  catalytic  light 
ends  units  and 
alkylation  units 

24-48  hrs.  4-5  days 

Naphtha 

Fractionating  Unit 

treated  feed 
from  storage 

4-5  days  —  clean  furnace, 

18  hrs.  repair  refractories, 

check  pumps 

Debutanizers 

treated  feed 
from  storage 

2-3  days  — check  pump  seals, 
24-48  hrs.  instrumentation,  relief  and 
regulator  valve 
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TABLE  3,1  4  (continued) 


UNIT  !  FEEDSTOCK 

STARTUP 

No  rmal 

After  emergency  shutdown 
and  2  week  idleness 

^DISTILLATION: 
jBooster  Station  #1 

off  gases  from 
various  processing 
units 

several 

hrs. 

24  hrs.  — purge  of  air 

Air  Station  HI 

produce  compressed 
air 

immediate 

immediate 

Hydrodesulfuri¬ 
zation  Units  HI 
and  #2 

oil  feed  from 
storage 

24-36  hrs. 

6-7  days-check  heaters, 
repair  refractory,  clean 
out  coked  up  catalyst  and 
product  lines 

Pipe  Stills  #3, 

H4,  5  and  6 

crude  petroleum 
from  storage 

12-18  hrs. 

3-4  days— clean  vacuum 
tower  bottoms,  tower  bottom 
pump,  and  lines.  Check 
heaters  and  repair 
refractories. 

TREATING: 

Effluent  Filtration 

Unit 

filters  waste  to 
remove  oil 

6  hrs. 

6  hrs.  — clean  filters 

Girbotol  Unit 

gas  feed  from 

LEFU  &  CLEU 

4-6  hrs. 

48  hrs.— check  unit 

Hydrofine  rs 

Hi,  2  and  3 

feed  from  storage 

16-20  hrs. 

3-4  days  — coked  furnaces 
and  reactors  need  cleaning, 
repair  refractories 

SOLVENTS: 

Benzene  Unit 

_ 

Hvdroformer  Units 

Hi  and  2 

- - - - - 

desulfurized  naphtha 
feed  from  storage 

8-12  hrs. 

5-7  days  — regenerate  coked 
catalyst.  Descale  heater 
tubes  and  decoke.  Repair 
refractories 

Naphtha  Units 


feed  from  pipe  stills 

and  storage  4-8  hrs. 


4-5  days  — decoke  heaters 
and  repair  refractories 


90  percent  of  the  operating  personnel,  after  receiving  the  alarm  and  orders 
to  shut  down,  would  elect  to  return  home  to  be  with  their  families  and  would 
remain  at  the  plant  10  minutes  at  the  most,  2)  the  fact  that  at  Baton  Rouge 
the  operating  procedures  and  action  taken  at  the  time  of  the  emergency  were 
above  average  in  effectively  limiting  the  damage  caused  by  catalyst  plugging, 
and  3)  the  fact  that  any  catalytic  cracker  can  be  operated  at  reduced  capacity 
without  the  furnace,  and  that  this  was  actually  done  at  Baton  Rouge  for  several 
weeks. 

An  example  of  the  consequences  of  delayed  shutdown  may  be  afforded 

by  the  Niigata,  Japan  refinery  fire,  in  which  damage  was  far  greater  than 
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that  caused  to  an  Alaskan  refinery  by  a  more  severe  earthquake.  There 
are  two  small  refineries  in  Niigata,  one  owned  by  Nippon  Oil  Company,  the 
other  by  Showa  Sekiyu  K.  K.  There  was  considerable  damage  at  the  47,000 
b/d  Showa  refinery,  where  crude  oil  and  gasoline  storage  tanks  caught  fire 
and  burned  out  of  control  for  several  days.  Tetraethyl  lead  tanks  nearby 
were  threatened,  and  had  they  caught  fire,  a  poisonous  smoke  would  have 
been  loosed  over  the  city.  A  tsunami  flooded  the  site  and  floating  oil  also 
ignited.  By  way  of  contrast,  the  Alaskan  earthquake,  three  months  earlier 
resulted  in  relatively  minor  damage  to  the  Kenai  (Alaska)  refinery,  even 
though  the  quake  was  more  severe:  8.  5  on  the  Richter  scale  vs.  7.  5  for 
Niigata.  The  vastly  smaller  Kenai  damage  may  have  been  due  to  better 
shutdown  procedures,  particularly  in  turning  off  certain  critical  feed  lines. 

In  Niigata,  the  feed  lines  were  not  cut  off  before  the  fire  spread,  and  fire¬ 
fighting  operations  were  further  hampered  because  all  main  water  lines  were 
damaged  and  electricity  cut  off.  The  cut-off  of  these  utilities  may  have  led 
demoralized  employees  to  abandon  shutdown  operations  sooner  than  might 
otherwise  have  been  the  case. 
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3.11  Preattack  damage  estimation  method 
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On  the  basis  of  the  calculations  of  blast  damage  completed  for  this 
study,  a  list  of  generalizations  can  be  made  of  the  vulnerability  of  the 
critical  units  of  a  refinery. 

1)  The  vulnerability  of  controlhouses  is  essentially  the  same  at  all 
refineries  in  that  severe  damage  to  instruments  and  controls  will 
result  at  an  extremely  low  overpressure  by  the  collapse  of  roofs 
and  masonry  walls. 

2)  Water  cooling  towers  at  all  refineries  will  suffer  severe  damage 
at  a  very  low  overpressure, 

3)  The  blast  vulnerability  of  processing  units  — crude  stills,  catalytic 
crackers,  etc,  — is  less  for  newer  units  than  for  older  ones. 

Newer  units  generally  use  reinforced  concrete  pedestals  and 
structures  for  supporting  large  vessels  and  towers;  older  units 
use  structural  steel  supports.  Although  designed  for  the  same 
wind  loads,  the  former  are  stronger  in  cases  of  high  dynamic 
loading  because  design  of  newer  units  is  cleaner  and  more  compact. 
This  reduces  the  projected  area  and  also  the  drag  coefficients  at 
high  Reynolds  numbers.  This  condition  is  particularly  marked  in 
the  case. of  fluid  catalytic  cracking  units,  where  the  older  units 
have  their  vessels  mounted  in  and  surrounded  by  a  massive  steel 
structure. 

4)  The  blast  vulnerability  is  independent  of  the  unit's  capacity,  except 
that  smaller  units  will  benefit  from  shielding  more  than  large  units. 

5)  Structural  damage  caused  by  blast  is  essentially  the  same  whether 
the  unit  is  operating  or  not.  The  fire  hazard  will  be  much  greater 
if  the  unit  is  operating.  An  operating  refinery  will  be  severely 
damaged  by  fire  at  5  psi,  when  blast  causes  pipe  breakage. 

6)  Tower-supported  flare  stacks  are  more  vulnerable  to  blast  than 
guyed  flare  stacks,  because  the  drag  loading  on  guys  is  insignificant 
compared  to  that  on  tower  supports. 


V 
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A  generalized  method  of  analyzing  a  structure  subject  to  blast  load¬ 
ing  is  shown  in  figure  3.  13,  which  is  prepared  in  accordance  with  the 
method  detailed  in  reference  69,  and  summarized  as  follows: 

1)  Determine  the  static  structural  resistance  to  a  loading  in  the  mode 

of  the  expected  dynamic  loads.  In  the  usual  case,  where  bending 
is  involved,  use  plastic  design  principles  to  evaluate  the  plastic 
moment,  of  the  structural  sections,  based  on  the  appropriate 

bending  formula  for  the  type  of  member  involved  and  solve  for  the 
allowable  static  loading.  Subtract  dead  load,  if  any,  from  the 
allowable  static  loading  to  arrive  at  net  resistance,  R. 

2)  Determine  the  natural  period  of  the  structure  or  member:  The 

weight  of  the  structure  or  member  (including  the  weight  carried) 

must  be  computed.  Calculate  the  effective  stiffness  k„,  and  use 

n, 

the  appropriate  load-mass  factor,  k^m> 

3)  Assume  a  loading  configuration;  based  on  the  resistance  calculated 

in  step  1,  assume  an  expected  peak  incident  overpressure,  p,  , 

s  o 

and  find  the  corresponding  positive  phase  duration,  calculate  the 
appropriate  duration  of  the  loading  function  applying  to  the  structure 
being  investigated. 

4)  Find  the  capacity  of  the  structure  or  element  in  terms  of  maximum 
overpressure  which  can  be  withstood:  Assess  a  value  of  ductility,  g  , 
based  upon  the  use  and  nature  of  the  structure,  and  the  engineer’s 
judgment.  Calculate  the  time  ratio,  C^,  and  find  the  corresponding 
value  of  the  Cf  factor.  Use  the  relationship,  Cf  =  R/ B,  to  find 
peak  load,  B,  from  the  computed  resistance,  R.  Finally,  find  the 
level  of  peak  incident  overpressure,  Pso>  with  which  the  drag  or 
reflected  pressure  loading,  B  =  qQ  or  Pro>  is  associated. 

5)  If  the  critical  loading  is  a  reflected  pressure,  the  resistance  can 
be  checked  using  a  polygonal  loading  diagram.  The  overpressure 
and  reflected  pressure  calculated  in  step  4  above  is  used  as  an 
assumed  loading  and  a  required  resistance  computed  for  comparison 
with  the  furnished  resistance. 
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BLOCK  DIAGRAM  OF  THE  ANALYSIS  OK 
STRUCTURES  SUBJECT  TO  Li  lam  loading 


3.  12  Weak  links 

The  analysis  of  controlhouses  and  water  cooling  towers  indicate 
they  are  the  weak  links  and  are  extremely  vulnerable  at  very  low  over¬ 
pressures. 

The  collapse  of  controlhouse  roofs  between  1.0  and  1.5  psi,  will 
cause  considerable  damage  to  instruments  and  switchgear,  which  means 
that  the  entire  process  system  of  the  particular  units  is  shut  down.  A 
process  unit  such  as  a  cat  cracker  cannot  be  run  manually  and  sectionalized, 
and  still  produce  a  consistently  acceptable  product,  because  there  are  too 
many  valves  to  be  opened,  kept  open  for  a  certain  period  of  time,  and  then 
closed  again  and  because  there  is  extreme  danger  of  explosion  when  such 
a  unit  is  run  manually.  A  consistently  acceptable  product  would  be  one 
which  present-day  engines  could  use  without  causing  preignition,  thereby 
ruining  the  engine.  Missile  damage  from  shattered  glass  at  overpressures 
greater  than  0.  5  psi,  would  also  compound  the  overall  damage  to  instruments. 

Although  water  cooling  towers  collapse  at  an  overpressure  of  1. 5  psi, 
they  would  be  repaired  in  less  time  than  that  required  for  the  controlhouses. 
This  does  not  mean  that  they  are  not  important  to  oil  refining,  because  with¬ 
out  a  water  cooling  process  a  refinery  cannot  operate.  They  are  merely 
less  of  a  weak  link  than  controlhouses. 

Another  possible  weak  link  is  curtailment  of  tanker  shipments  or  port 
facilities.  For  example,  virtually  all  of  the  crude  oil  arriving  at  East  Coast 
refineries  — with  16  percent  of  the  nation's  capacity— comes  by  ship,  and  none 
comes  by  pipeline.  One  possible  solution  would  be  to  convert  existing  natural 
gas  lines  to  crude  oil. 
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4.  POSTATTACK  REPAIR 


4.  1  Refinery  repair 
4.1.1  General 

Postattack  repair  of  refineries  depends  on  eight  main  con¬ 
siderations:  (1)  the  products  most  needed  in  the  survival  period,  (2)  the 
requirement  that  a  refinery  operate  as  a  unit,  that  is,  the  requirement  for 
balanced  operations,  (3)  the  damage  level  at  a  particular  refinery  and  the 
relative  damage  levels  at  other  plants,  (4)  the  availability  of  construction 
equipment  and  tools  needed  for  repair,  (5)  the  availability  of  replacement 
materials  and  parts  needed  for  repair,  (6)  the  salvage  of  damaged  equip¬ 
ment,  (7)  the  availability  of  labor  with  the  skills  needed  for  repair,  and 
(8)  the  availability  of  blueprints  and  mechanical  drawings  both  for  repair 
and  rebuilding. 

The  first  and  third  considerations  will  determine  which  re¬ 
fineries  and  how  much  of  them  should  be  repaired  first.  For  example, 
if  aviation  gasoline  is  in  demand,  given  TEL  availability,  then  those  re¬ 
fineries  with  high  alkylation  capacities  should  be  repaired  first.  In  the 
event  TEL  is  not  available,  aviation  gas  could  be  used  for  motor  gasoline 
since  the  octane  number  of  avgas  without  TEL  is  an  adequate  substitute  for 
motor  gas.  A  breakdown  of  the  large  refineries  with  capacities  exceeding 
100,000  barrels/day  into  the  capacities  of  their  principal  processing  units 
is  given  in  table  4.  1.  A  more  complete  list  is  given,  for  example,  in 
reference  10.  With  a  listing  such  as  this,  and  an  evaluation  of  the  extent 
of  damage  suffered  at  each  of  these  refineries,  repair  priorities  can  be 
determined  in  order  to  meet  special  postattack  requirements  for  certain 
fuels.  Reference  to  figure  3. 5  in  section  3.7.2  will  locate  the  units  which 
produce  the  products  shown  as  headings  in  table  4.  1. 

The  second  consideration  determines  what  units  are  required 
and  the  sequence  in  which  they  are  placed  "on  stream.  "  These  minimum 
requirements  are  discussed  in  two  specific  areas  in  section  4.  1.2. 

The  third  largely  determines  feasibility  of  repair.  Where 
damage  is  so  widespread  that  major  towers  and  structures  have  been  over¬ 
turned  and  destroyed,  extensive  fires  have  occurred,  and  there  is  little  or 
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rv  salvageable  equipment,  the  entire  refinery  will  probably  have  to  be  coin- 
p'  ('ly  rebuilt  except  for  foundations.  Other,  less  badly  damaged  refineries 
1  ild  probably  be  repaired  first. 

The  fourth  through  the  eighth  considerations  determine  the  se- 
q  ience,  or  the  method  of  repair,  under  the  specific  postattack  circumstances. 

4.  1.2  Minimum  postattack  processing  requirements 

for  balanced  operation 

Under  postattack  conditions,  those  processing  units  which  are 
essential  and  the  order  in  which  they  should  be  repaired  and  brought  on  stream 
are  determined  by  the  minimun  fuel  quality  requirements  discussed  in  section  5.1. 

Refinery  processing  equipment  varies  in  capacity  and  in  processing 
details  from  one  refinery  to  the  next.  There  is  so  much  complexity  that  it  is 
difficult  to  define  a  "typical"  refinery,  but  modern  refineries  have  certain  traits 
in  common:  they  all  have  crude  distillation  and  light  ends  recovery  units;  most 
have  catalytic  cracking  of  one  form  or  another;  and  most  use  the  alkylation 
process  for  production  of  high  octane  aviation  gasoline. 

The  first  unit  to  bring  on  stream  is  the  crude  oil  still,  with  both 
atmospheric  and  vacuum  fractionators,  for  the  production  of  straight  run  gaso¬ 
line,  catalytic  cracker  feed,  tractor  fuel,  jet  aircraft  fuel,  diesel  fuel,  and 
furnace  oil.  Little  or  no  further  processing  would  be  required  except  for 
straight  run  gasoline. 

The  next  unit  to  bring  on  stream  is  the  catalytic  cracker  and  its 
fractionator,  fed  by  gas  oil  from  the  pipe  still.  This  unit  would  provide  mod¬ 
erately  high  octane  gasoline  and  light  naphtha,  cracked  diesel  fuel,  furnace 
oil  and  fuel  oil.  The  gasoline  and  light  naphtha  would  require  stabilization 
in  the  light  ends  recovery  plant,  but  the  diesel  fuel,  furnace  oil  and  fuel  oil 
could  be  used  without  further  processing. 

The  vapor  recovery  units  in  the  light  ends  plant  would  be  needed 
for  recovery  of  butane  and  propane  from  the  stocks  of  naphtha  from  the  pipe 
still  and  catalytic  cracker,  before  the  olefin  stocks  are  fed  into  the  alkylation 
unit  or  blended  to  make  regular  gasoline.  Feedstocks  for  the  light  ends  units 
must  be  brought  up  to  pressures  as  high  as  300  psi  for  absorption,  and  some 
gas  compressor  equipment  would  therefore  be  required  with  the  light  ends  unit. 
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The  butane  recovered  would  be  used  for  blending  of  motor  gasolines,  while 

the  propone  would  be  used  as  LPG,  refinery  gas,  or  as  a  substitute  motor 
20 

fuel.  Light  gas  oil  for  the  absorption  process  would  be  available  from  the 
pipe  still  or  catalytic  cracker. 

The  alkylation  plant  with  its  reactors  and  fractionators  would 
be  brought  on  stream  next  for  production  of  high  octane  alkylate.  Its  olefin 
feed,  propylene,  butylene,  or  amylene,  comes  from  the  vapor  recovery  units. 
Isobutane  comes  from  the  vapor  recovery  units  or  is  purchased  from  natural 
gasoline  plants.  The  precise  choice  of  olefin  feed  would  depend  on  the  type  of 
light  ends  unit  available.  The  alkylation  process  is  practically  indispensable 
for  the  production  of  high  octane  alkylate  required  for  aviation  gasoline.  It 
is  theoretically  possible,  but  not  practical,  to  produce  a  small  yield  of  aviation 
gasoline  without  alkylation  by  catalytic  hydroforming,  polymerization,  or 
hydrogenation.  ^ 

4.  1. 3  Examples  of  balanced  postattack  operations  ' 

For  either  normal  or  postattack  refining,  it  is  important  that  re¬ 
fining  operations  be  balanced  with  processes,  equipment,  and  demands,  so  that 
the  incoming  crude  oil  is  converted  into  a  maximum  of  needed  refined  products 
with  a  minimum  of  waste.  Ttn„  requires  that  each  process  unit  be  utilized  to 
full  capacity,  and  that  everything  produced  be  used,  either  as  product  or  as 
feed  for  other  units.  Otherwise,  part  of  the  useful  crude  oil  entering  the  re¬ 
finery  would  be  converted  into  surplus  products  which  would  have  to  be  thrown 
away  or  stored.  Disposal  is  difficult  and  storage  capacity  is  limited. 

Two  examples  of  such  balanced  hypothetical  postattack  operations 
at  the  Baton  Rouge,  Louisiana,  refinery  of  Humble  Oil  &  Refining  Company  follow. 
In  example  I,  only  the  94,000  b/ d  crude  still  and  one  fluid  catalytic  cracking  unit 
are  available.  In  example  II,  available  units  include  the  equipment  of  example  I, 
plus  seven  600-HP  gas  compressors;  light  ends  fractionators,  one  alkylation 
stirred  reactor,  and  deisobutanizer,  debutanizer,  depropanizer  and  rerun  towers 
for  recovery  of  alkylate  light  ends. 

The  threshold  operations  described  in  these  examples  are  only 
indicative,  because  the  exact  situation  would  depend  upon  a  great  many  factors, 
and  in  any  situation  certain  optimization  should  be  possible. 


4-5 

-^Prepared  by  Robert  C.  McCay,  Office  of  Oil  and  Gas,  U.  S.  Department  of  Interior 


RATOS  ROUGH  LOUISIANA  REFINERY 
THRESHOLD  OPERATION 


Example  I  —  A vai lable  only  a)  94,000  b/d  Crude  Still  or  #10 

b)  Fluid  Catalytic  Cracker  (FCCU)  #2  or  #3 


Crude  Stilling 

Product 

Vol.  <r 

b/d 

(das  and  Loss 

3 

2,800 

8  50°  End  Point  Naphtha 

17 

16,000 

JP-4  Jet  Fuel 

10 

0,300 

.let  Fuel  A 

11 

10,300 

FCCU  Feed 

53 

50,000 

Residual  Bottoms 

_ 6 _ 

5,  600 

Charge— South  Louisiana  Crude 

100 

;  94,000 

Fluid  Catalytic  Cracking  Unit  (FCCU) 


(From  correlation  made  from  reviewing  several  operating  report  sheets, 
estimate  68fo  conversion  on  FCCU  @  50,000  b/d  charge  rate) 


Product 

Vol.  % 

b/d 

Gas,  Coke  and  Loss 

28 

1  14,000 

15 ft  Reid  Vapor  Press 

Fluid  Cracked  (FC)  Naphtha 

40 

FC  Cycle  Gas  Oil 

27 

Heavy  Gas  Oil  Bottoms 

5 

FCCU  Charge 

100 

50,000 

Motor  Gasoline 

Component 

b/d 

Vol.  % 

Research 
Octane 
w/ 3  cc 
TEL/ cal 

Research 

Octane 

clear 

Straight  Run  (SR) 
Naphtha 

16,000 

44 

87 

70 

FC  Naphtha 

56 

_ 94 

85 

36,000 

100 

91 

78 

TEL  requirement 


i 


36,000  b/d 

42  gals /barrel 

3  a  c.  /  gal 

'169  c.c./lb. 

27,000  lbs /day 


Coke  consumed  in  regenerator  of  FCCU 
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Yield  Summary 

Product  _ _ Vol.  % _ b/d 


91  O.  N.  Motor  Gasoline 

38 

3  6,000 

J  P-4  Jet  Fuel 

10 

9,300 

Jet  Fuel  A 

ify 

10,300 

Diesel-Heating  Oil 

14/ 

13,500 

Residual  Fuel 

9 

8,100 

Fuel  Gas,  Coke,  Loss 

18 

16,800 

Total  Crude  Input. 

100 

94,000 

•'•Diesel -Heating  Oil  yield 

can  l;e  increased  at 

corresponding  decrease  in 

Jet  Fuel  A. 


FCCU  Catalyst  Requirement  estimated  .25  50,000 

2,000 


6.25  tons/ day 


Example  II— Equipment  available  in  example  I,  plus  seven  600  HP  gas  compress¬ 
ors,  light  ends  fractionation,  one  alkylation  stirred  reactor,  and 
deisobutanizer,  debutanizer,  depropanizer,  and  rerun  towers  for 
recovery  of  alkylate  light  ends. 


1)  Estimate  recovery  0.2  Vol.  %  of  Crude  as  iC^ 

2)  FCCU  iC,  yield  estimated  as  6.3% 

C^j  yield  estimated  as  10.0% 

3)  Alkylation:  Alkylate  produced  =  3350  x  1.53 

C,  consumed  =  5100  -  1.70 
’(Excess  C.’  =  2000  B/D) 
Alkylation  shrinkage  =  3350  +  3000  -  5100 
Aviation  Alkylate  '  90%  of  5100  =  4600 


200  B/D 

3150  B/D 
5000  B/D 

5100  B/D 
3000  B/D 

1250  B/D 


4)  115/145  Aviation  gasoline  Aviation  Alkylate 
Light  Straight  Run  (LSR)+  C^ 


(In  volume,  alkylation  rerun  bottoms  replaces 
500  b/d  LSR  +  C^  from  motor  gasoline  pool  — 
no  significant  change  in  quality) 


5)  Aviation  TEL  requirement 

5100 

42 

4.6 

169 

4600  90% 
500  10% 
5100  100% 


5800  lbs / day 


6) 


Sulfuric  Acid  Catalyst 
requirement 


5100  b/d 

42  gals /barrel 

0.3  lbs/ gal  =  32  tons/day 

2000  lbs /ton 

Yield  Summary 

Product 

Vol.  % 

b/d 

91  O.N.  Motor  Gasoline 

38 

36,000 

115/145  Aviation  Gasoline 

5 

5, 100 

JP-4 

10 

9,300 

Jet  Fuel  A 

11 

10,300 

Diesel-Heating  Oil 

14 

13,500 

Residual  Fuel 

9 

8, 100 

Fuel  Gas,  Coke,  Loss 

13 

11,700 

Total  Crude  Input 

100 

94,000 
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It  would  be  impossible  to  operate  any  of  the  units  without  fairly  extensive  off¬ 
site  facilities,  such  as  utilities  and  feed  and  product  tankage.  Further,  achieve 
ment  of  the  conversion  and  production  shown  would  require  very  extensive  down 
stream  processing  equipment. 

4,  1. 4  Repair  procedures 

In  completely  rebuilding  a  damaged  plant,  the  simplest  approach 
is  to  rebuild  as  it  was  from  existing  drawings.  In  a  postattack  environment, 
this  could  be  impractical,  if  the  obsolescence  of  some  equipment  makes  pro¬ 
curement  difficult,  or  the  drawings  are  destroyed  or  lost.  The  policy  of 
Standard  Oil  Company  (New  Jersey)  is  to  microfilm  the  drawings  and  store 
them  in  locations  remote  from  the  refinery.  Repair  effort  should  generally  be 
directed  at  rebuilding  the  essential  units  as  they  were  before  the  attack.  There 
are  two  reasons  for  this:  first,  the  engineering-design  cycle  for  a  major  re¬ 
design  would  add  8  to  9  months  to  the  repair  time,  and,  second,  many  engi¬ 
neering-design  man  hours  would  be  required  to  handle  the  changes  induced  by 
shortage  of  materials,  non-availability  of  critical  items,  and  forced  substi¬ 
tutions. 

In  postattack  repair,  more  field  fabrication  and  more  scavenged 
components  and  materials  would  be  used,  since  the  normal  fabricating  shops, 
if  extant,  would  probably  be  overstrained.  It  would  be  possible  to  use  prefabri¬ 
cation  techniques  at  an  adjacent  location,  then  move  in  a  prepackaged  assembly 
for  erection.  Reinforced  concrete  could  be  used  to  replace  structural  steel, 
and  wooden  handrails  can  oe  substituted  for  steel.  Painting  and  some  fire¬ 
proofing  could  be  done  after  unit  startup.  Temporary  pipe  hangers  could  be 
installed,  to  be  1  Dialed  later. 

If  :  '  :  overturn,  they  would  cause  widespread  damage  simply 

by  falling  on  adjacent  equipment,  and  the  towers  themselves  might  be  badly 
damaged  and  dented,  probably  beyond  repair.  This  would  become  apparent, 
of  course,  almost  immediately  at  the  start  of  the  repair  project,  allowing 
early  procurement  of  new  towers.  Internal  parts  would  also  be  seriously 
damaged  but  still  probably  repairable.  Large  towers  over  13  feet  in  diameter 
must  be  field  fabricated -that  is,  shipped  to  the  site  in  pieces  and  erected  by 
a  crane  on  their  support  structures -because  they  are  too  large  to  ship  in  one 
piece.  They  will  be  pressure  tested  at  the  site.  Towers  under  13  feet 
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in  diameter,  however,  can  be  shipped  to  the  site  in  one  piece  and  can  be 
erected  by  a  crane  and  gin  pole.  They  will  probably  be  pressure  tested 
at  the  fabricator's  shop.  As  a  last  resort,  the  fallen  towers  might  be  re¬ 
used,  if  not  exposed  to  fire. 

Storage  tanks  should  be  repaired  by  removing  damaged  sections 
with  acetylene  torches,  and  then  welding  to  install  new  sections.  Replace¬ 
ment  of  storage  tank  cone  roofs  is  easier  than  that  of  floating  roofs,  and  it 
might  be  necessary  to  replace  some  floating  roofs  with  cone  roofs,  although 
some  products  should  not  be  stored  in  cone  roof  tanks  because  of  the  product 
losses  and  some  possibility  of  fire  or  explosion.  In  general,  storage  tanks 
are  easy  to  repair,  requiring  only  welders  and  steel  plate,  which  is  normally 
in  stock.  Tank  fabrication  is  normally  subcontracted  to  specialists  such  as 
Chicago  Bridge  and  Iron,  Graver,  Pittsburgh-Des  Moines,  and  Horton. 

Refinery  maintenance  shops  are  limited  by  lack  of  "know-how" 
and  heavy  lifting  capacity.  They  can  undertake  repair  of  damaged  equipment, 
but  fabrication  must  be  done  by  specialized  contract  maintenance  shops,  for 
which  long  lead  times  are  necessary.  While  many  refineries  do  their  own 
maintenance,  the  trend  is  increasingly  toward  contracting  with  refinery 
maintenance  specialists  to  do  the  work.  This  means  less  and  less  "in-house" 
repair  and  fabrication  capability  at  refineries,  which  is  doubly  disadvantageous 
in  postattack  terms:  the  refineries  are  less  self-sufficient,  and  the  maintenance 
specialists,  being  relatively  few  in  number,  are  vulnerable  to  attack  or,  sur¬ 
viving,  would  be  overtaxed  in  trying  to  meet  the  simultaneous  needs  of  many 
refineries  in  a  stricken  industry. 

Hydrostatic  testing  is  sometimes  done  in  the  field,  sometimes 
at  the  fabricator's  shop.  Field  testing  might  be  required  for  evaluation  of 
damaged  vessels,  and  pneumatic  or  steam  testing,  although  less  safe,  could 
probably  be  substituted  for  hydrostatic  testing.  In  hydrostatic  tests  of  re¬ 
paired  vessels,  however,  the  vessel's  bubble  trays  and  other  internal  struc¬ 
tures  must  be  removed  to  avoid  damage,  while  steam  testing  does  not  require 
this. 

4. 1.  5  Materials 

Gin  poles  and  100-  and  150-foot  cranes  with  100  tons  or  more 
capacity  will  be  required  for  erection  of  towers,  and  would  probably  have  to 


be  brought  to  the  site  from  another  refinery.  If  rubber-mounted,  they 
could  be  driven  on  roads;  otherwise  rail  transportation  would  be  used. 
Major  refinery  constructors  have  a  good  deal  of  idle  construction  equip¬ 
ment-air  poles,  cranes,  and  piping  in  their  own  storage  dumps,  and 
this  equipment  would  probably  be  available  in  an  emergency. 

Piping  is  not  a  critical  supply  item  because  standard  sizes  are  in 
general  use  and  are  usually  stocked  at  refineries.  Needed  sizes  could 
probably  be  obtained  by  shopping  around. 

Items  with  long  lead  times  include  compressors,  slide  valves, 
pressure  vessels,  and  heat  exchangers.  The  normal  lead  time  for  a 
vessel  of  13-foot  diameter  by  200-foot  length,  including  testing,  is 
sixteen  weeks  after  receipt  of  steel.  There  are  about  10  shops  capable 
of  fabricating  such  vessels,  among  them:  Chicago  Bridge  &  Iron  in 
Birmingham  and  Milwaukee;  Nooter  Corporation  in  St.  Louis:  Wyatt 
Industries,  Inc.  in  Houston:  Sun  Shipbuilding  &  Drydock  Company  in 
Chester,  Pennsylvania. 

Transporting  such  a  vessel  can  be  a  problem.  The  limit  for 
rail  shipments  of  long  vessels  is  a  13-foot  diameter  and  17  feet  for 
short  ones.  A  length  of  200  feet  or  more  could  be  a  problem  on  curves, 
necessitating  a  dry  run  in  advance  of  actual  shipment  to  see  if  any  tele¬ 
graph  poles  or  other  obstructions  should  be  moved.  Other  means  of 
shipment  are  by  barge  or  by  towing  the  vessel  afloat. 

There  are  only  one  or  two  shops  capable  of  fabricating  the  heavy 
walled  reactors  used  on  hydrocrackers,  of  which  Struthers  Wells  Corpor¬ 
ation,  Warren,  Pennsylvania,  is  one. 

The  principal  suppliers  of  turbines  and  compressors  are  General 
Electric,  Westinghouse,  Ingersoll  Rand,  Clark,  and  Brown  Boveri. 

They  are  located  primarily  in  the  East  and  Midwest.  Emergency  trans¬ 
portation  by  freight  of  heavy  machinery  could  also  be  a  problem  since  it 
normally  takes  6  weeks  to  obtain  the  freight  cars  at  the  vendor's  plant. 

Heat  exchangers  are  also  a  critical  item  because  of  high  pressures 
and  required  corrosion  resistance.  For  some  types,  lead  times  are  8  to 
10  months. 
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Valves  are  less  critical  because  a  low-quality  item  can  be  substi¬ 
tuted  temporarily  for  a  specialty  valve  in  most  cases.  Instruments  are 
less  critical  than  fabricated  items  but  more  so  than  piping.  The  suppliers 
of  electronic  and  pneumatic  instruments,  such  as  Foxboro  and  Bailey  Meter, 
are  concentrated  primarily  in  New  England  and  Cleveland.  Opportunities 
for  interchanging  instruments  are  few  because  calibration  would  probably 
have  to  be  changed,  and  because  of  the  instrument's  complexity  it  would 
probably  have  to  be  sent  back  to  the  vendor  for  alterations. 

Mechanical  components  such  as  bearings  are  not  normally  stocked 
at  refineries  because  local  suppliers  generally  carry  adequate  inventories. 

Cooling  towers  are  fairly  vulnerable  to  blast  and,  if  destroyed, 
would  take  time  to  repair.  Because  of  their  wooden  construction,  however, 
there  should  be  many  opportunities  for  shortcuts. 

Furnaces  are  generally  not  interchangeable  because  they  are  de¬ 
signed  to  operate  at  a  specific  temperature  and  flow  rate.  Varying  this 
upward  or  downward  can  cause  coking  and  other  difficulties.  Use  of  cast 
firebrick  is  becoming  more  common,  and  in  that  case,  even  refractories 
cannot  be  moved.  The  incoloy  tubes  in  some  furnaces  are  a  critical  item. 

Instrument  repairmen  would  be  the  most  critical  of  the  labor  grades 
needed  for  the  repair  of  the  controlhouses  in  the  low  levels  of  blast  damage. 
At  higher  levels  of  damage,  pipefitter-welders  would  be  the  most  critical, 
with  electricians  next,  and  both  are  in  short  supply  even  in  normal  times. 

In  recruiting  pipefitter- welders,  the  first  to  be  recruited  would  be  skilled 
welders  who  can  pass  the  welder's  qualification  test  or  whose  qualification 
on  another  job  can  be  verified.  If  welders  must  be  brought  in  from  else¬ 
where  they  should  be  qualified  where  hired  and  not  at  the  repair  site.  As 
a  last  resort,  unskilled  labor  can  be  trained,  but  it  takes  6  weeks  to  train 
a  welder. 

An  actual  example  of  a  repair  project  is  that  of  a  fluid  cat  cracker 
unit  after  an  explosion  blew  off  the  regenerator  head  and  dropped  the  re¬ 
generator  a  few  feet  into  the  structure,  cocking  it  about  20  degrees.  The 
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rest  of  the  unit  was  not  seriously  t.amaged.  Repair  took  110  days  (including 
design  of  new  vessel),  and  peak  work  force  on  any  one  day  was  300  men. 

The  decision  was  made  to  design  a  new  vessel  because  the  damaged  one  was 
obsolete,  with  a  heavier  wall,  dating  from  1942,  which  would  have  taken  longer 
to  fabricate  at  the  time  of  repair  (1963)  than  a  vessel  conforming  to  contemporary 
design  standards.  Other  components  that  were  damaged  included  the  regenerator 
support  structure,  elevator,  other  vessels,  and  pumps.  The  dented  vessels 
and  the  pumps  were  salvaged,  the  support  structures  were  replaced,  the  cyclones 
were  replaced  by  redesigned  cyclones*  and  the  silencers  were  repaired.  The 
regenerator  head,  when  it  blew,  fortunately  landed  clear  of  the  main  part  of 
the  unit,  causing  relatively  little  damage.  For  the  new  vessel,  a  154-ton  lifting 
crane  was  required. 

Other  examples  include  repair  of  a  reactor  head,  which  had  blown 
off.  It  was  decided  to  install  a  new  reactor,  and  the  two  adjacent  reactors  as 
well,  although  it  could  have  been  repaired  in  8  to  20  days  by  welding  on  a  new 
head. 

Past  experience  with  new  construction  shows  that  7  to  8  months 

are  normally  required  for  a  typical  unit  from  foundations  to  completion,  pre- 

18  71 

ceded  by  8  to  9  months  for  design.  ’  With  a  crash  program  in  the  con¬ 
struction  phase,  the  time  to  construct  could  be  reduced  by  one-third  at  the 
most,  so  that  a  construction  job  normally  requiring  7-1/2  months  to  complete 
could  be  done  in  5  months  on  a  three -shift  basis  or  with  full  use  of  overtime. 

4.  1.  6  Repair  schedule 

On  the  following  pages  a  number  of  repair  schedules  are  pre¬ 
sented,  together  with  estimates  of  labor  requirements  in  man-days,  by 
labor  craft,  for  each  project.  These  apply  to  the  postattack  repair  of  typical 
petroleum  refinery  processing  units,  and  are  compiled  from  the  detailed 
damage  calculations  of  particular  units  in  reference  69.  Repair  is  scheduled 
according  to  the  critical  path  method  (CPM),  scheduling,  in  which  arrow 
diagramming  is  used  to  illustrate  the  step-by-§tep  progress  of  the  job.  This 
technique  is  widely  used  by  design  and  engineering  firms  in  the  petroleum 
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and  chemical  industries  and,  although  similar  to  PERT  scheduling,  is 
more  adaptable  to  the  particular  requirements  of  this  project, 

A  detailed  description  of  the  procedures  to  be  followed  in  making 
OPM  charts  is  contained  in  reference  50,  In  general,  the  method  in¬ 
volves  listing  each  job  separately,  in  any  order,  then  making  a  diagram 
in  which  each  job  is  represented  by  an  arrow.  The  sequence  of  the 
arrows  is  indicative  of  the  order  and  priority  in  which  the  jobs  are  to  be 
performed.  The  number  in  the  box  below  the  line  indicates  the  estimated 
time  to  complete  in  project  days.  The  numbers  in  the  upper  half  of  the 
circles  at  both  ends  of  the  arrow  are  the  job  identification  numbers.  The 
numbers  in  the  lower  half  of  the  circles  are  the  accumulated,  or  elapsed, 
time  in  project  days  from  start  of  the  project.  The  critiral  path  is  de¬ 
termined  by  finding  the  path  through  the  arrow  diagram  giving  the  longest 
elapsed  time  at  each  junction,  A  one -shift  day  is  assumed. 

In  scheduling  an  actual  construction  project,  as  much  detail  as 
possible,  except  for  the  obvious,  is  usually  shown  on  the  CPM  schedule. 
Each  jou  is  broken  down  into  as  many  smaller  jobs  as  possible  to  permit 
easier  analysis.  For  scheduling  hypothetical  postattack  repair  projects, 
however,  it  is  not  practical  to  show  as  much  detail,  because  of  the  many 
uncertainties  in  accurately  estimating  the  damage,  the  salvageability  of 
components,  and  the  extent  of  blast  damage  on  supplier  industries  and 
the  resulting  effect  on  lead  times. 

Normally,  these  lead  times  arc  known  quite  accurately  from  past 
and  current  experience.  The  critical  path  can  then  be  determined  with 
a  high  degree  of  certainty.  In  postattack  repair  projects,  however,  lead 
times  could  vary  widely  from  normal  peacetime  conditions,  because  of 
the  above-mentioned  difficulty  in  predicting  the  damage  suffered  by 
vendor's  plants  and  transportation  facilities,  and  the  availability  of  labor. 

The  critical  path  in  postattack  repair  can  be  almost  anywhere, 
depending  on  the  specific  attack  and  resultant  shortages  of  particular 


items,  destruction  of  suppliers  plants,  or  nonavailability  of  certain  types 
of  personnel.  For  this  study,  sufficient  human  ingenuity  is  assumed  for 
surmounting  such  shortages  and  averaging  out  the  effects.  Therefore,  the 
critical  path  has  not  been  identified  in  the  CPM  schedules  presented  here, 
I^ead  times  can  be  shortened  slightly  or  extended  considerably  during  a 
wartime  situation  because  of  priorities  and  decreased  manpower.  This 
wide  variation  in  lead  times  for  purchased  items  can  be  seen  in  reference 
13,  pages  50  and  51;  where,  for  example,  heat  exchangers  which  normally 
took  2  to  4  months  to  process  in  1955  ar.d  1958,  had  lead  times  of  10  to  12 
months  during  the  Korean  crisis  in  August,  1952.  Overall,  lead  times 
probably  would  be  extended,  however,  .upending  on  the  magnitude  of  the 
attack  damage  to  the  entire  country. 

Priorities  can  influence  greatly  the  repair  effort  as  evidenced 
by  a  crash  program  in  the  cons  .  u<  lion  of  a  TEL  batch  plant  during  World 
War  II.  To  fill  a  sudden  demand  for  TEL,  a  16-unit  batch  plant  was  set 
up  at  the  Chambers  Works  in  an  existing  building.  Top  priority  was  obtained 
for  procurement  oi  autoclaves  and  other  long-lead  items,  and  the  plant  was 
finished  in  just  15  weeks,  including  design  and  the  installation  of  new  floors 
in  the  building.  A  work  force  of  200  to  350  was  used  on  this  project  for 
field  erection  and  equipment  installation.  The  lead  times  used  in  making 
these  repair  schedules  have  been  taken  from  the  literature,  and  from 
>  xperience  in  procurement.  The  basic  data  used  in  making  these  estimates— 
size  of  work  force,  days  or  man-days  needed  to  accomplish  specific  tasks— 
have  been  reviewed  by  competent  people  in  the  industry  and  it  is  believed 
that  these  data  are  realistic  for  normal,  preattack  conditions,  and  that  they 
would  not  be  much  shorter  under  postattack  conditions. 

Whether  or  not  they  apply  in  postattack  repair  schedules  is  a 
question  that  cannot  be  answei  ed  without  a  detailed  knowledge  of  the  scenario, 
such  as  a  definite  attack  pattern  and  analysis  of  damage  to  all  industries 
involved  in  repair,  together  with  assuming  specific  allocations  of  material 
and  labor.  Since  this  is  beyond  the  scope  of  the  current  study,  normal 
(1965)  preattack  conditions  are  used  as  the  basis  for  all  repair  estimates, 
with  the  understanding  that  these  data  are  to  be  reviewed  and  revised  in  an 
actual  postattack  planning  situation.  By  using  1965  conditions  as  the  basis. 
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the  data  presented  have  a  common  and  uniform  basis  with  which  postattack 
planners  are  expected  to  be  familar,  and  imminently  more  suitable  than  a 
basis  already  adjusted  for  some  assumed,  but  probably  incorrect,  post- 
attack  situation. 

The  labor  requirements  for  the  repair  projects  analyzed  here 
are  broken  down  by  craft  into  12  basic  categories.  These,  with  their 
standard  ratios,  are  as  follows: 


Boilermakers  .  12 

Bricklayers  .  02 

Carpenters  .  08 

Electricians  .  04 

Common  Labor  .  18 

Insulators  .  07 

Operating  Engineers  .  07 

Millwrights  .01 

Painters  .  02 

Pipefitters  .  30 

Ironworkers  .  08 

Gunite  Men  &  Cement  Finishers  .  01 


1.00 

These  are  the  same  categories  and  standard  ratios  used  by  a 
leading  design  engineering  firm  in  accounting  and  estimating  new  refinery 
work. 

The  categories  of  boilermakers,  pipefitters,  and  ironworkers 
also  include  welders.  Operating  engineers  are  the  crane  operators,  vehicle 
operators,  portable  machinery  operators,  and  their  helpers.  Roofers  are 
included  among  the  carpenters.  Instrument  men,  whether  or  not  specializing 
in  electronic  or  pneumatic  instruments,  are  included  among  electricians. 

The  standard  ratios  are  those  used  on  large  field  construction 
projects  involving  work  by  all  crafts,  and  do  not  necessarily  apply  in  the 
case  of  repair  projects  where  not  all  types  of  equipment  would  suffer  equal 
damage.  In  cases  of  postattack  repair  estimates,  where  the  project  in¬ 
volves  most  of  the  different  crafts,  the  standard  ratios  are  shown  as  a  means 
of  comparison  with  the  estimated  ratios.  In  some  cases,  there  is  consider¬ 
able  variation,  as  for  instance  in  the  repair  chart  of  the  80,000  b/d  crude 
still,  at  3.  5  psi,  and  at  7.  0  psi.  Since  the  furnaces  collapse  at  6.  5  psi,  and 
they  can  be  analyzed  as  separate  units,  their  repair  is  shown  on  a  separate 
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CPM  chart,  and  thus  does  not  appear  on  the  repair  charts  for  3.  5  psi  or 
7.  0  psi.  This  means  that  essentially  no  bricklayers  would  be  used  on  the 
latter  two  jobs,  and  a  preponderance  of  bricklayers  appears  on  the  furnace 
repair  job.  The  standard  ratios  are  therefore  not  a  particularly  useful 
guide  in  this  case,  although  their  application  could  be  more  useful  at  a 
later  stage  when  a  number  of  repair  analyses  are  being  combined  to  de¬ 
termine  total  repair  effort  for  a  complete  plant  or  for  an  industry. 

There  are  some  labor  categories  required  for  field  erection  ' 
which  do  not  appear  in  the  labor  estimates.  These  are  primarily  personnel 
doing  office  and  engineering  work- accountants,  bookkeepers,  timekeepers, 
clerks,  guards,  engineers,  and  secretaries.  Also,  no  labor  is  included 
for  erection  of  special  shops,  temporary  buildings,  offices  and  shacks. 

Generally,  the  level  of  damage  selected  for  these  repair 
estimates  is  the  lowest  overpressure  at  which  mode  rate -to -heavy  damage 
would  occur,  involving  prolonged  unit  shutdowns  and  repair  times  up  to  a 
year  in  duration.  The  damage  level  is  not  great  enough,  however,  to  make 
repair  impractical.  In  most  cases  the  collapse  of  major  structures  and 
overturning  of  towers  and  reactor  vessels  is  involved.  In  the  latter  instances, 
it  must  be  generally  assumed  that  the  unit  is  not  operating  at  the  time  of 
the  blast;  otherwise  there  would  be  a  fire  and  consequent  damage  serious 
enough  to  make  repair  unfeasible. 

It  is  also  assumed  that  there  will  be  no  redesign,  i.  e,,  that 
the  unit  is  to  be  rebuilt  essentially  as  it  was,  according  to  existing  drawings, 
and  that  these  drawings  are  readily  available  at  the  site.  Although  it  simpli¬ 
fies  the  task  of  repair  estimating,  in  some  ways  this  assumption  is  not  realistic. 
The  company  owning  the  plant  may  desire  to  redesign  obsolete,  or  even  slightly 
outdated,  facilities  in  keeping  with  the  latest  developments  in  technology,  for 
competitive  and/or  cost  reasons.  Some  redesigning  may  also  be  required 
for  expedience  in  repair,  to  provide  shortcuts  and  the  most  rapid  return 
possible  to  operating  conditions. 
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An  illustration  of  this  situation  arose  recently  in  the  above- 
mentioned  repair  of  a  fluid  catalytic  cracking  unit,  after  a  regenerator 
explosion  had  seriously  damaged  the  regenerator  and  its  support 
structure.  Drawings  were  available  for  the  regenerator  vessel,  hut 
because  it  had  been  designed  and  built  several  years  previously,  the 
existing  vessel  was  obsolete  by  current  standards  and  fabricating  tech¬ 
niques.  The  decision  was  made  to  redesign  the  regenerator  according 
to  current  practice,  simply  because  it  would  have  taken  much  longer  to 
fabricate  the  vessel  as  it  was  originally  designed.  Furthermore,  al¬ 
though  the  original,  damaged  vessel  could  have  been  repaired,  it  was 
decided  to  build  a  new  one  because  salvage  and  reuse  would  have  in¬ 
volved  lengthy  inspection,  and  negotiations  between  the  engineering  and 
design  contractor,  the  refining  company,  underwriters,  and  locai  gov¬ 
ernment,  concerning  the  structural  safety  of  the  salvaged  vessel. 

These  considerations,  then,  illustrate  the  complexity  and  the 
type  of  problems  likely  to  arise  in  connection  with  salvageability  vs. 
rebuilding  and  redesigning  vs.  rebuilding  as  is.  Each  case  must  be 
decided  on  its  own  merits.  In  the  present  analysis,  provision  is  made 
in  the  repair  charts  for  both  repair  and  salvage  of  damaged  components, 
and  also  procurement  of  new  components,  as  both  will  undoubtedly  take 
place. 

Table  4.  2  is  a  summary  of  the  repair  estimates  presented  in 
the  subsequent  CPM  charts,  figures  4. 1  —  4.  9.  At  their  request, 
company  names  have  been  withheld,  but  the  units  represent  actual 
plants  currently  in  operation.  The  units  taker,  for  analysis  are  of 
recent  construction  and  contemporary  design.  It  is  assumed 
that  there  were  no  fires,  as  this  would  probably  rule  out  any  question 
of  repair.  Damage  is  listed  for  only  the  major  items,  in  addition  to 
extensive  supplementary  damage  to  instruments,  piping,  structure, 
electrical  equipment,  pumps,  valves,  heat  exchangers,  drums,  etc. 

The  repair  time  and  estimated  field  labor  in  man-days  to  repair 
are  taken  from  the  CPM  charts.  The  estimated  field  labor  in 
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man-days  to  build  a  complete  new  unit,  for  purposes  of  drawing  the  chart, 
is  computed  from  case  histories  of  actual  new-plant  construction,  and 
adjusted  for  the  capacity  of  the  unit  in  question.  In  the  case  of  the 
atmospheric  furnace  on  the  crude  unit,  however,  a  slightly  different 
procedure  was  followed.  Cases  of  actual  construction  show  that  furnaces 
require  about  8  percent  of  the  total  field  labor.  Since  there  are  two  fur¬ 
naces,  the  atmospheric  furnace  and  the  vacuum  furnace,  this  8  per  cent 
was  allocated  according  to  their  relative  capacities,  about  three  to  one. 

Thus  6  per  cent  of  the  labor  for  the  complete  unit  is  allocated  to  the 
atmospheric  furnace  and  2  percent  is  allocated  to  the  vacuum  furnace. 

Since  the  repair  involves  more  labor  (but  not  necessarily  more  expense) 
than  a  new  furnace,  the  repair  may  not  be  worth  undertaking.  The 
decision  in  any  specific  case  depends  on  the  availability  of  supplies  and 
the  essentiality  of  the  repair  from  a  national  survival  or  recovery  stand¬ 
point. 

Each  of  the  repair  problems  analyzed  involves  some  materials. 
Generally,  the  materials  could  be  better  and  more  efficiently  fabricated 
outside  the  plant  if  the  external  situation  permitted.  In  other  cases, 
some  of  the  materials  could  be  obtained  from  various  storage  yards,  or 
perhaps  salvaged  from  other  refineries. 

Further  work  needs  to  be  done  to  allocate  the  repair  dollars  to 
the  industries  required  in  the  repair;  and  the  translation  of  these  dollars 
from  preattack  to  postattack  times  could  then  perhaps  be  accomplished  by 
techniques  similar  to  those  used  in  a  study  by  the  Institute  for  Defense 
Analyses. 

The  cost  of  materials  for  the  repair  is  computed  in  terms  of 

51 

1965  dollars,  by  using  current  wage  rates  of  refinery  construction  labor 
and  assuming  that  direct  labor  cost  represents  1/3  of  all  direct  costs  of 
process  units,  and  1/2  for  storage  tanks.  The  actual  hourly  wage  rate  used 
is  $4.  85. 
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Table  4.  2  SUMMARY  OF  REPAIR  ESTIMATES 
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WIND  GIRDERS  *  STAIRS  DEFORMED. 

REPAIR:  REPLACE  DAMAGED  PLATE*  WIND  GIRDERS*  STAIRS 
FITTINGS.  FREE  ROOF. 


4.  2  TEI .  plant  repair 

Among  the  most  critical  items  with  respect  to  vulnerability  and 
repair  are  the  high  pressure  autoclaves  used  in  the  hatch  process.  If 
the  agitators  are  stopped  while  the  reaction  is  in  progress,  there  is 
a  sudden  buildup  of  temperature  and  pressure'  inside  the  autoclaves. 

I  hey  are  protected  against  this  by  a  rupture  disc  located  in  the  over¬ 
head  pipe.  In  case  of  emergency  shutdown  or  power  failure,  the  rupture 
disc  fails,  relieving  the  pressure  in  the  autoclave  and  saving  it  from 
more  serious  damage.  Of  course,  rupture  of  the  disc  allows  the  spread 
of  hazardous  chemicals  and  vapors  throughout  the  area,  and  the  hazard 
to  personnel  is  intensified  if  the  ventilation  system  has  also  been  shut 
down  by  a  power  failure. 

In  1962,  there  was  such  an  emergency  in  a  batch  plant,  when  a 
power  failure  occurred.  \o  serious  damage  was  sustained,  although 
three  discs  ruptured.  Spare  discs  arc  normally  maintained  in  stock 
at  these  plants  and  replacement  was  therefore  not  a  problem. 

Other  repair  items,  which  are  not  critical,  are  piping  and  steel 
plate.  Alloy  steel  piping  is  normally  used,  and  preferred,  but  plain 
carbon  steel  can  be  substituted  temporarily  without  serious  consequences. 
Instruments,  gear  boxes  and  drives,  and  heat  exchangers  would  also  not 
present  critical  repair  problems  because  of  adequate  stocks  and  excellent 
nearby  repair  shops.  The  normal  vendor's  lead  times  on  instruments 
and  gear  reducers  is  three  months,  and  many  are  interchangeable. 

The  autoclaves  themselves  have  9  months'  normal  lead  time, 
however,  and  would  be  a  critical  item  if  replacement  were  necessary. 

In  postattack  repair  work,  it  would  therefore  be  desirable  to  salvage 
as  many  autoclaves  as  possible  rather  than  to  procure  new  cnes. 

An  example  of  rebuilding  involving  a  batch  plant,  by  salvaging 
equipment  after  a  fire,  occurred  in  1935.  In  this  case  the  autoclaves 
were  salvaged  and  reused,  when  the  batch  plant  was  rebuilt,  and  are 
in  operation  today. 

Fire  is  generally  not  a  serious  hazard  in  TEL  manufacturing,  at 
least  compared  to  the  petroleum  refining  industry.  Sprinkler  systems 
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are  available  in  all  buildings,  primarily  to  keep  steel  vessels  cool  in  a 
fire,  Water  is  an  effective  extinguishant  for  TEL  fires  because  TEL's 
1.  6  specific  gravity  permits  the  water  to  float  on  it  and  cut  off  its  contact 
with  the  air.  Ethyl  chloride  fires,  on  the  other  hand,  aie  very  difficult 
to  extinguish.  Foam  is  ineffective  because  the  ethyl  chloride  vapors  can 
penetrate  the  foam  blanket  and  continue  burning. 

It  can  be  said  that  the  vulnerability  of  TEL  and  TML  production 
facilities  depends  primarily  on  the  buildings.  The  only  outdoor  equip¬ 
ment  involved,  the  ethyl  chloride  fractionating  columns,  are  not  abso¬ 
lutely  essential  for  operation  if  there  is  an  adequate  supply  of  ethyl  chlo¬ 
ride.  The  fire  hazard  is  much  less  than  in  petroleum  refining,  and  the 
repair  problems,  at  least  for  batch  plants,  much  less  severe.  The 
critical  items  are  the  autoclaves,  and  they  lend  themselves  readily  to 
repair,  as  illustrated  in  past  experience.  Although  essential  for  high 
octane  motor  fuels  production,  TEL  production  facilities  could  probably 
be  restored  to  operating  condition  sooner  than  the  petroleum  refining 
plants  they  serve. 

4.  3  Storage  tank  repair 

The  repair  of  storage  tank  shells  is  normally  accomplished  by 
welding.  Epoxy  plastics,  however,  are  now  in  use  for  temporary  and 
emergency  repairs  on  leaky  tanks,  and  their  use  under  postattack  con¬ 
ditions  would  be  advantageous.  Epoxies  are  widely  accepted  as  a 
structural  adhesive,  but  their  use  for  repair  of  petroleum  equipment  is 
relatively  new.  Reference  43  describes  methods,  materials,  and 
applications.  There  are  two  principal  plastics  described:  the  epoxies, 
used  for  light  repairs  and  small  leaks,  and  the  isopolyester  plastics, 
normally  used  for  heavier  jobs  and  the  repair  of  metals  damaged  by 
corrosion. 

4.  4  Generalization  of  repair  estimates 

It  can  be  seen  in  the  repair  estimates  of  major  processing  units 
that  the  form  of  the  CPM  charts  for  moderate-to-heavy  damage  does 
not  vary  appreciably.  Specific  tasks,  however,  the  number  of  days 
and  the  man-days  of  labor,  may  be  quite  different.  This  is  true 
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when  comparing  repair  schedules  of  pipe  stills,  catalytic  crackers,  vapor 
recovery  units,  alkylation  units,  and  hydrocrackers.  If  particular  items 
of  equipment  are  compared,  such  as  a  furnace  vs,  a  fractionating  column, 
the  similarity  obviously  no  longer  exists  for  many  types  of  equipment,  and 
the  labor  categories  involved  in  repair  also  vary  widely.  Since  all  processing 
units  have  furnaces,  fractionators,  pumps,  heat  exchangers,  motors,  drums, 
piping,  and  instruments,  the  form  of  the  repair  schedule  remains  unchanged 
as  long  as  complete  units  or  complete  refineries  are  compared. 

The  repair  effort  required  to  return  a  plant  to  full  operating  condition 
depends  on  the  damage,  size  of  the  plant,  and  type  of  equipment. 

The  first  of  these,  damage,  has  already  been  discussed  in  section  3.7. 
The  second,  size  of  the  plant,  definitely  affects  the  postattack  repair  effort. 
This  assumes  that  the  size  of  the  plant  is  a  function  of  capacity  and  that 
repair  effort  in  man  days  is  proportional  to  the  field  labor  required  in 
erection  of  new  plants,  other  things  being  equal.  In  turn,  this  is  a  function 
of  the  capacity  of  the  plant,  and  follows  the  so-called  six-tenths  power  rule 
which  applies  to  the  overall  cost  of  new  plants.  This  rule  states  that,  for 
two  plants  A  and  B, 

n 

where  the  exponent,  "n"  can  range  from  0  to  slightly  greater  than  1.  A 
value  of  n  =  0  would  make  the  right-hand  side  of  the  equation  unity  and 
Cost  A  would  equal  Cost  B.  This,  then,  corresponds  to  a  fixed  cost 
which  does  not  vary  with  size;  some  of  the  engineering  expenses,  for 
for  example,  or  the  instrumentation  for  a  given  process  may  be  independent 
of  size.  From  a  repair  standpoint,  the  survey  of  damage,  and  the  plan'  ing 
and  scheduling  may  be  independent  of  size  and  would  also  have  a  value  of  "n" 
approaching  0. 

On  the  other  hand,  the  field  fabrication  of  tanks  and  vessels  causes 
the  exponent  to  approach  1,0,  The  po  -.attack  repair  of  such  units  would 
also  have  the  same  value  of  exponent.  The  exponent  is  greater 


Cost  A  __  Capacity  A| 
Cost  B  [Capacity  B_ 
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than  one  for  equipment  which  operates  under  high  pressures  such  as 
vessels  and  piping  and  require  greater  thicknesses  for  strength. 

The  postattack  repair  requirements  for  plants  suffering  equal 
damage,  as  a  function  of  the  capacity  of  the  unit,  are  generally 
expected  to  represent  a  proportion  of  the  new  cost  of  the  specific  units 
and  a  value  of  n  -  0.75  is  recommended  for  high  damage  levels.  This 
value  was  determined  by  averaging  exponents  for  units  considered  in  this 
study  as  follows: 


Equipment 

Cost  Exponent 

Cracking,  catalytic 

0.83 

Cracking,  thermal  (and  refining) 

0.51  to  0.70 

Topping  stills 

0.62 

Vacuum  distillation 

0.57 

Cooling  towers 

0.64 

Storage  tanks: 

Cone  roof 

0.70 

Floating  roof 

0.73 

Spherical: 

15  psi 

0.63 

100  psi 

0.56 

Steam  generation: 

Large,  200  psi 

0.61 

Large,  1000  psi 

0.81 

Power  generation 

0.88 

Furnaces 

0.66 

Towers: 

Constant  diameter 

0.88 

Constant  height 

1.56 

Average  Exponent 

0.75 

At  low  damage  levels,  up  to  2.0  psi,  the  primary  damage  occurs 
to  controlhouses,  instrumentation  and  water  cooling  towers.  The  con- 
trolhouses  and  instrumentation  are  independent  of  size  of  plant  and  "n" 
approaches  0.  Cooling  towers  are  affected  by  size,  however,  and  "n" 
for  towers  has  a  value  of  0.  64.  Therefore,  it  seems  reasonable  that 
for  low  damage  levels,  an  average  of  these  two  values  resulting  in  an 
exponent  of  about  0.  3  should  be  used. 

To  summarize,  it  appears  that  the  exponential  relationship,  known 
as  the  six-tenths  rule,  and  used  for  estimating  the  cost  of  building  complete 
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refineries  as  a  function  of  capacity,  can  be  extended  to  apply  in  the  case 
of  estimating  field  man-days  of  labor  in  postattack  repair  projects  by 
making  the  proper  choice  of  exponent. 

The  equation  then  becomes: 

Labor  time  for  postattack  repair  of  unit  A  [Capacity  A~1n 
Labor  time  for  postattack  repair  of  unit  B  ”  [Capacity  B  ' 

A  generalized  CPM  repair  chart  is  shown  in  figure  4.  10. 


5.  ESSENTIAL  POSTATTACK  FUELS, 
SUBSTITUTE  FUELS,  AND  ADDITIVES 


5,  1  Essential  postattack  fuels  and  quality  requirements 

The  following  petroleum  fuels  are  considered  essential  for  recovery  in 
the  postattack  environment,  exclusive  of  natural  gas,  which  is  beyond  the 
scope  of  this  study: 

1)  Motor  gasoline  for  automobiles  and  trucks  (regular  grade) 

2}  Aviation  gasoline  for  piston  aircraft 

3)  Jet  aircraft  fuel 

4)  Diesel  fuel 

5)  Furnace  fuel 

1 8 

Motor  gasoline  is  usually  a  blend  of  straight  cut  (virgin)  gasoline 
direct  from  the  crude  still;  cracked  gasoline,  naphtha  produced  by  catalytic 
reforming,  alkylate,  and  butane  to  give  it  the  proper  Reid  vapor  pressure. 
One  or  more  of  these  ingredients  can  be  eliminated,  depending  on  the  grade 
of  product  required.  Other  desirable  additives  for  quality  improvement 
are  antioxidants,  metal  deactivators,  corrosion  inhibitors,  preignition 

19 

preventers,  anti-icing,  upper  cylinder  lubricants,  dyes,  and  decolorizers. 
Tetraethyl  lead,  which  raises  the  octane  number  of  gasoline,  is  the  only 
essential  additive;  without  it  motor  gasoline  would  have  to  be  blended  en¬ 
tirely  from  high  octane  ingredients,  which  would  drastically  reduce  pro¬ 
duction. 

Freedom  from  water,  gum,  and  sulfur  comprise  the  most  significant 
quality  requirements  of  motor  gasoline  are,  as  follows: 

Water  produces  carburetor  difficulties.  Gum  can  be  tolerated  in 
small  amounts,  and  is  not  a  major  problem  unless  the  gasoline  is  stored 
for  a  long  time.  Corrosive  sulfur  adversely  affects  carburetor  performance 
and  corrodes  the  muffler  and  tailpipe  over  a  period  of  time;  noncorrosive 
sulfur  affects  lead  susceptibility.  The  maximum  permissible  sulfur  content 
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is  about  0,  40  percent;  0.25  percent  was  the  maximum  permissible 
during  World  War  II.  and  no  trouble  developed.  *9 

Freedom  from  vapor  lock.  This  is  governed  by  the  boiling  rr.nge 

and  indicated  by  the  Reid  vapor  pressure,  ranging  from  12.  7  psi 'allow- 

1 9 

able  maximum  at  60  F  to  5.3  psi  at  120  F,  although  authorities  disagree. 
Some  upward  revision  of  these  values  is  possible  at  the  expense  of  added 
inconvenience. 

Warmup  and  acceleration.  These  are  also  governed  by  boiling 
range,  and  would  not  be  critical  performance  characteristics  for  post¬ 
attack  fuel  requirements.  w 

Antiknock  quality.  Modern  automobile  engines  require  increasingly 
higher  octane  numbers  in  order  to  reduce  knocking.  Mild  knocking  causes 
no  harm,  and  has  little  effect  on  performance,  but  severe  knocking  can 
cause  power  loss  and  damage  to  pistons  and  bearings.  L-head  engines 

10 

tend  to  knock  at  high  speeds,  and  overhead  valve  engines  at  low  speeds. 

The  octane  number  is  generally  used  as  an  indication  of  antiknock  capability, 

although  it  does  not  correspond  perfectly  to  road  performance.  The  systems 

commonly  used  today  for  rating  antiknock  values  are  the  Research  and  the 

Motor  methods  for  automobiles;  and  the  Aviation  and  the  Supercharge 

19 

methods  for  aircraft  engines. 

The  lead  susceptibility  of  gasoline  can  vary.  For  example,  3  cc.  of 

tetraethyl  lead  per  gallon  will  raise  a  60-MON  typical  straight  run  gasoline 

to  79  MON  if  sulfur  content  is  below  0. 1  per  cent,  and  will  raise  an  80-MON 

catalytically  cracked  gasoline  to  85  MON.  The  effect  of  tetraethyl  lead  is 

greater  if  the  original  octane  number,  the  sulfur  content,  and  the  percentage 

3  9 

of  cracked  gasoline  are  all  low. 

Because  of  the  importance  of  tetraethyl  lead,  this  antiknock  additive 
is  discussed  separately  in  section  5,3. 

Crankcase  dilution.  This  is  also  governed  by  boiling  range,  and 
would  not  be  a  critical  characteristic  for  postattack  requirements. 

Aviation  gasoline's  important  characteristics  are  antiknock  rating 
under  both  lean  and  rich  mixture  conditions,  cleanliness,  chemical  stability, 
and  boiling  range.  There  are  four  grades,  ranging  in  octane  up  to  115/145 
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grade.  Thr  blend  normally  contains  at  least  85  percent  iso-octane  (the  standard) 

bv  which  100  MON  is  measured)  produced  by  the  alkylation  process,  plus 

virgin  (straight  run)  gasoline,  isopentane,  butane  for  quick  starting,  and 

18 

aromatics  such  as  toluene.  Tetraethyl  lead  is  used  for  improving  anti¬ 
knock  characteristics  in  quantities  up  to  4.6  cc/gal.  Its  effectiveness  is 
limited,  and  it  cannot  eliminate  the  need  for  alkylate, 

T ractor  fuel :  Tractors  are  able  to  burn  a  lower  octane  gasoline 

without  difficulty,  and  other  specifications  normally  considered  critical 

for  automobile  engines  are  not  critical  for  tractors.  Straight  run  gasolines 

or  kerosine  can  be  used  without  further  treating  and  without  antiknock 

additives.  Specifications  vary  because  of  the  need  for  cheapness  and  vari- 

etv  of  engines.  ASTM  (American  Society  for  Testing  Materials)  D1215 
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specifies  1.0  percent  maximum  sulfur  and  this  could  be  even  higher. 

Many  tractors  are  also  equipped  for  operation  on  LP  J. 

Jet  military  aircraft  fuel  (JP-4)  is  a  relatively  wide  boiling  range 
volatile  distillate  and  is  made  by  blending  heavy  virgin  naphtha  with  kero- 
sine  of  approximately  550°  end  point.  It  could  be  made  from  a  single  side 
stream  of  a  pipe  still.  Domestic  airline  jet  fuel  (K-40  or  Avjet  A)  is  pure 
kerosine.  The  only  treating  involves  caustic  wash  or  sweetening  and  in 
some  cases  hydrotreating,  which  could  be  eliminated  in  an  emergency. 

Diesel  fuei  is  obtained  as  cracked  materials,  as  virgin  side  streams 
of  a  pipe  still,  or  as  a  blend  of  the  two.  The  important  characteristics  are 
cleanliness,  ignition  quality,  fluidity  and  atomization,  and  volatility. 

Sulfur  content  is  not  critical.  Additives  normally  used  in  diesel  fuels 
could  be  omitted  in  an  emergency  without  serious  consequences.  The 
relaxation  of  cleanliness  specifications  would  have  to  be  coordinated  with 
the  design  of  filters  for  fuel  lines  or  else  removal  of  the  filters.  Nozzles 
would  have  to  be  overhauled  more  frequently,  and  in  extremely  cold  weather 
the  pour  point  might  be  a  problem,  requiring  some  means  of  warming  up 
the  fuei. 

Furnace  fuel:  Heating  oils  and  industrial  fuels  are  generally  made 
from  distillates  such  as  kerosine  and  gas  oil  and  residual  fuels.  The  use 
of  cracked  distillates  leads  to  problems  of  instability,  normally  corrected 
by  treating  or  additives.  Although  customers  would  have  to  accept  annoying 
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smells  and  the  need  for  more  frequent  cleaning,  such  fuels  would  function 
without  additional  treating  The  heavier  fuels  are  residual  fuel  oils  and 
are  used  for  refinery  fuel,  as  Bunker  "C  '  or  Navy  Special.  Indiscriminate 
blending  of  different  residual  fuel  oils  and  cracked  oils  might  lead  to  prob¬ 
lems  of  separation  or  settling  out  of  the  heavier  fractions.  This,  like  the 
odor,  is  also  in  the  nuisance  category. 

5.2  Essential  raw  materials 

For  the  refinery  to  operate  properly,  certain  essential  raw  materials 
are  required.  The  postattack  need  for  these  will  depend  on  the  level  of 
activity  at  the  refinery  during  the  reconstruction  period,  and  the  units  being 
brought  on  stream.  The  essentiality  of  crude  oil  as  a  raw  material  input 
is  manifest.  TEL  and  TML,  important  additives  for  the  production  of  gaso¬ 
line,  are  discussed  in  section  5.  3.  The  raw  materials  for  TEL  production 
include  lead,  sodium,  chlorine,  and  ethylene;  the  ethylene  alone  is  produced 
at  the  oil  refinery. 

The  fluid  catalytic  cracker  units  require  a  fluidized  silica-alumina 
catalyst,  and  although  most  of  the  catalyst  is  regenerated  and  reused,  a 
substantial  quantity  is  lost  and  must  be  replaced  daily. 

The  alkylation  process,  used  in  the  Baton  Rouge  threshold  of  recovery 
schedule  (section  4.3.2)  uses  substantial  quantities  of  sulfuric  acid;  typical 
alkylation  yield  data  might  require  0.  5  to  2  pounds  of  sulfuric  acid  for  every 
gallon  of  alkylate.  The  spent  acid  is  returned  to  the  supplier.  In  addition, 
some  of  the  isobutane  used  is  purchased  in  the  form  of  a  saturated  compound 
from  natural  ~  soli ne  plants. 

Most  of  the  other  processes  referred  to  in  the  various  sections  of  this 
report  use  some  form  of  catalyst.  For  example,  platforming  and  ultra¬ 
forming  use  a  platinum  catalyst,  which  may  require  replacement  at  rates  of 
one  pound  per  100  barrels  of  feed,  with  the  used  catalyst  returned  to  the 
supplier  for  credit. 

The  bulk  of  the  essential  inputs  described  above  come  from  the  chemical 
industry  and,  although  beyond  the  scope  of  the  current  study,  these  and  other 
essential  chemicals  are  recommended  for  further  investigation. 
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5.3  Antiknock  additives 

This  discussion  of  additives  is  limited  to  tetraethyl  lead, 

"TEL",  and  tetramethyl  lead,  (C  Ilgl^Pb,  "TML",  because  other  additives 
are  primarily  for  convenience,  and  could  be  eliminated  under  emergency 
conditions  without  seriously  affecting  engine  performance. 

A  detailed  description  of  the  facilities  and  operations  at  DuPont's 
C  hambers  Works  TEL  plant  is  presented  in  appendix  A. 

5.3.1  Applications 

Regular  gasoline  today  averages  93  RON  (Research  Octane  Number), 
and  premium  averages  over  100  RON.  Regular  is  adequate  for  about  63 
per  cent  of  the  cars  on  the  road  without  excessive  knocking;  premium 
satisfies  about  95  per  cent.  At  80-85  RON  all  cars  on  the  road  would  be 
knocking  severely  enough  to  do  engine  damage  and  drastically  limit  per¬ 
formance.  If  80-85  RON  were  the  only  gasoline  available,  one  solution 
would  be  to  limit  speed  and  motor  rpm,  by  some  land  of  a  carburetor 
adaptation  such  as  a  restriction  in  the  fuel  intake  line.  Another  partial 
solution  would  be  to  retard  the  spark.  This  change  in  timing  could  be 
done  at  any  service  station.  Its  effectiveness  is  limited  by  the  fact  that 
engine  performance  is  drastically  affected  beyond  a  2  or  3 -degree  change 
in  timing.  Since  a  1 -degree  change  in  timing  corresponds  to  1  octane 
number,  the  difference  between  93  and  83  octane  would  require  a  10-degree 
compensation  in  timing,  which  is  more  than  can  be  tolerated  from  an  engine 
performance  standpoint. 

Modern  automobile  and  truck  engines,  gasoline  and  diesel,  are  de¬ 
signed  for  maximum  performance  using  the  best  grade  of  fuels  com¬ 
mercially  available.  This  is  particularly  true  in  the  case  of  high-horsepower 
truck  engines,  and  any  deterioration  in  octane  number  would  seriously  affect 
truck  engine  performance.  For  this  reason,  the  best  fuels  available  for 
non-military  postattack  purposes  should  be  reserved  for  trucks,  because 
of  their  importance  in  transporting  critical  materials  and  food. 

The  products  marketed  as  antiknock  additives  are  actually  blends 
of  TEL  or  TML,  scavenging  compounds,  stabilizers,  and  dye.  The 
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scavengers  are  added  to  prevent  the  buildup  of  lead  compounds  in  the 
cylinder  or  spark  plug  fouling. 


5.3,2  Antiknock  additives  production 

The  following  plants  in  the  western  hemisphere  produce 

TEL  or  TML: 


Ethyl  Corporation 


Baton  Rouge,  Louisiana 
Pasadena,  Texas 
Pittsburg,  California 
Sarnia,  Ontario 


batch  process 
batch  process 
batch  process 
batch  process 


400  million  lbs/yr 
(both  plants  combined) 
shut  down 


E, 

Deepwater,  New  Jersey 
Antioch,  California 
Maitland,  Ontario 
Coatzacoalcos,  Mexico 


duPont  deNemours  Company 

batch  &  continuous  \  350  million  lbs/yr 

continuous  process  J  (both  plants  combined) 
batch  process  25  million  lbs/yr 

batch  process  40  million  lbs/yr 


Houston  Chemical  Company 
Beaumont,  Texas  batch  process 

Nalco  Chemical  Company 

Freeport,  Texas  electrolytic  process  40  million  lbs/yr 

There  are  only  three  processes  in  commercial  use  at  this  time: 

23 

(1)  the  batch  process,  by  which  the  first  TEL  was  manufactured  and  which 
still  accounts  for  the  bulk  of  production,  and  in  which  ethyl  chloride  is  reacted 
with  lead  sodium  alloy  in  autoclaves,  followed  by  steam  distillation;  (2)  the 
continuous  process,  employing  the  same  reaction  between  ethyl  chloride  and 
lead  sodium  alloy,  but  on  a  continuous  throughput  basis;  and  (3)  the  Nalco 
electrolytic  process,  in  which  magnesium  chips  are  reacted  with  ethyl 
chloride  to  produce  magnesium  ethyl  chloride,  followed  by  a  continuous 
electrolysis  with  ether  solvent,  in  which  lead  pellets  are  the  anode  and  the 
vessel's  steel  walls  are  the  cathode. 
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The  DuPont  continuous  process  is  about  ten  years  old,  and  is 
commercially  feasible  only  in  large  quantity  throughput.  The  Nalco 
process  has  been  in  commercial  use  only  about  one  and  one-half  years, 
and  accounts  for  5  per  cent  of  the  U.  S.  production. 

TML  is  essentially  interchangeable  with  TEL.  It  is  made  by  the 
batch  process  only,  using  methyl  chloride  instead  of  ethyl  chloride. 

The  process  is  basically  the  same  as  the  TEL  batch  process,  with  a  few 
differences,  primarily  the  use  of  higher  autoclave  pressures  and  mixing 
a  dry  graphite  lubricant  with  the  reactants  to  prevent  paddle  binding  in 
the  autoclave. 

With  a  moderate  amount  of  equipment  modification,  a  TML  batch 
plant  could  be  converted  to  a  TEL  batch  plant.  The  reverse  is  not  true, 
however,  because  of  the  greater  pressure  needed  for  TML. 

A  more  detailed  discussion  of  the  TEL  and  TML  manufacturing 
processes  is  found  in  "Plant  Descriptions"  ( appendix  A). 

5.4  LPGas  a  substitute  fuel 

In  the  event  that  supplies  of  gasoline  and  diesel  fuel  were  reduced 
by  an  attack,  liquid  petroleum  gases  (LPG)  could  be  substituted  to  an 
extent  if  conditions  warranted.  LPG,  a  mixture  predominantly  of  propane 
with  propylene  and  butane  gases,  currently  enjoys  limited  use  in  internal 
combustion  engines,  particularly  in  large  company-owned  car  and  truck 
fleets,  and  in  tractors.  There  are  839  natural  gas  processing  plants 
scattered  throughout  23  states,  and  810  of  them  produce  LPG  as  well  as, 
in  most  cases,  natural  gasoline  and/or  gasoline  — LPG  combinations. 

Their  locations  and  specific  capacities  are  detailed  in  reference  25. 
Production  of  propane  at  these  plants  in  1365  averaged  12,232,105  gal/day. 
The  extent  to  which  this  production  can  be  increased  or  the  extent  to  which 
the  18,343,495  gal/day  of  combined  gasoline-LPG  can  be  converted  to 
straight  LPG  at  the  gas  plants  are  beyond  the  scope  of  the  present  study, 
but  merit  further  investigation.  In  any  event,  the  large  number  of  natural 
gas  plants  and  their  geographical  dispersion  suggest  that,  under  most 
foreseeable  conditions  — including  the  hypothetical  attack  on  refineries 
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detailed  in  chapter  3,  LPG  production  capability  will  survive,  and  that 
LPG  will  be  available  in  good  supply,  and  perhaps  in  surplus.  It 
therefore  represents  an  excellent  potential  substitute  for  gasoline,  far 
superior  to  any  previously  used,  such  as  charcoal  as  a  petroleum  sub¬ 
stitute  in  Europe  in  World  War  II.  In  addition  to  the  gas  plants,  liquid 
petroleum  gases  are  produced  at  cycling  plants  and  refineries,  but  the 
great  majority  is  produced  at  the  gas  plants. 

The  Research  Octane  Number  of  LPG  ranges  from  94  for  butane 

to  110  for  propane,  and  the  Motor  Octane  Number  ranges  from  85  for 

propylene  to  94  for  propane.  This  constitutes  the  "octane  envelope" 

of  LPG,  shown  in  figure  5.  1.  It  can  be  increased  by  using  TML,  which 
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will  vaporize  with  the  propane.  In  1931,  regular  gasoline  averaged 
aoout  64  RON,  and  LPG  offered  a  substantial  octane  advantage.  With 
the  gradual  increase  in  octane  of  regular  gasoline,  and  the  increase  in 
compression  ratios,  this  advantage  has  been  whittled  away,  so  that  in 
1965,  regular  gasoline  at  93  RON  entered  the  LPG  octane  envelope. 

The  use  of  LPG  is  now  justified  economically  by  savings  in  maintenance, 
engine  life,  and  operating  costs,  rather  than  in  octane. 

Most  manufacturers  of  trucks,  buses,  and  farm  tractors,  are 
prepared  to  supply  either  gasoline,  diesel,  or  LPG  engines  as  required 
by  the  customer.  Farm  tractors  are  a  major  user  of  LPG:  in  1963, 

9,588  LP  gas  tractors  were  produced,  compared  to  98,198  diesel  tractors 
and  96,235  gasoline  tractors.  Also,  over  20,000  LPG  carburetors  were 
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sold  for  field  conversion  of  tractors  to  LPG.  A  good  example  of  the 

use  of  LPG  is  in  the  fleet  of  800  repair  trucks  and  passenger  cars  operated 

30 

by  a  telephone  company  in  Florida.  Conversion  was  done  on  a  production 
line  basis  by  eight  mechanics  who  completed  the  conversion  from  gasoline 
to  LPG  in  6  months.  This  is  about  18  conversions  per  man-month.  Most 
of  the  required  tools  and  equipment  would  be  found  in  any  well-equipped 
auto  repair  shop. 

Parts  for  LPG  conversion  are  supplied  by  most  of  the  engine  manu¬ 
facturers  such  as  GMC,  John  Deere,  International  Harvester,  and  Ford, 
and  also  by  companies  specializing  in  carburetors. 
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The  Chicago  Transit  Authority  provides  an  example  of  the  use 

of  propane  in  buses.  Of  2661  motor  buses  as  of  June  7,  1062,  1549 

3  1 

were  propane  fueled. 

The  feasibility  of  converting  diesel  locomotives  to  LPG  has  been 
studied,  and,  although  technically  possihle,  it  is  probably  not  practical 
to  do  so  because  the  conversion  problem  grows  with  the  size  of  the  engine. 
Practical  operating  problems  in  railroad  operation  would  probably  limit 
conversion  to  LPG  to  yard  and  switching  engines  involved  in  "captive" 
service.  Other  "captive"  service  applications  where  LPG  conversion 
is  feasible  are  in  industrial  lift  trucks  and  stationary  engines. 

Operations  of  engines  on  LPG  have  not  been  entirely  trouble  free. 

There  have  been  some  premature  engine  failures,  burned  valves,  burned 

pistons,  and  cracked  cylinder  heads  blamed  on  LPG.  The  situation  has 

been  greatly  improved  with  the  adaptation  of  a  uniform  fuel  specification, 

as  many  of  these  failures  were  caused  by  too  much  butane  or  propylene 

in  the  fuel,  resulting  in  a  lower  octane  number.  Other  causes  of  engine 
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failure  are  due  to  improper  conversion. 

In  conclusion,  LPG  can  be  used  as  a  fuel  in  gasoline  and  diesel 
engines  in  passenger  cars,  trucks,  buses,  and  farm  tractors  in  the  post¬ 
attack  period,  if  conversion  is  done  properly. 

Further  study  is  recommended,  particularly  on  the  vulnerability 
of  propane  production  facilities  at  gas  plants,  and  the  vulnerability  of 
LPG  carburetor  suppliers. 
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6.  H ECOMMENDA TIONS  FOR  FURTHER  STUDY 


Repair  times  in  this  study  are  based,  out  of  necessity  imposed  by 
limitation  of  scope,  on  the  following  assumptions: 

1.  Replacement  parts  are  available  or  substitutes  could  be 
fabricated. 

2.  Materials  for  repair  are  available. 

3.  Trained  operators  and  repair  personnel  are  available. 

These  assumptions  are  probably  unrealistic  for  many  postattack  en¬ 
vironments,  but  there  are  no  criteria  as  yet  to  indicate  the  probable  postattack 
availability  of  these  three  essential  inputs  to  repair.  Further  analysis  of  these 
inputs  in  connection  with  specific  attack  patterns  is  recommended,  particularly 
the  preparation  of  repair  charts  for  those  industries  essential  to  refinery  re'pair. 
Analyses  of  items  1  and  3  (above)  require  a  specific  attack  scenario,  and  co¬ 
ordination  with  other  research  by  the  Office  of  Civil  Defense,  Prior  studies  on 
petroleum  products  distribution  should  be  updated  in  the  same  connection. 

The  scope  of  this  project  was  limited  to  the  survival  period.  Extension 
of  the  work  into  the  recovery  period  is  recommended. 

This  study  of  the  petroleum  industry  points  out  the  reliance  of  many 
refineries  on  electricity  from  outside  power  plants.  Conversely,  of  course, 
many  electric  power  generating  plants  depend  upon  petroleum  products.  In 
connection  with  the  Critical  Industry  Repair  series,  of  which  this  report  is  a 
part,  it  may  prove  beneficial  to  reexamine  electric  power.  The  original 
Critical  Industries  Repair  Analysis:  Electric  Power,  used  earlier  techniques 
which  have  become  somewhat  outdated  by  the  advances  in  the  state  of  the  art 
in  the  more  than  three  years  since  it  was  published.  ^  Such  advances,  em¬ 
bodied  in  the  current  report,  include  a  generalized  vulnerability  model  with 
efforts  started  to  program  it;  application  of  CPM  techniques  to  repair  problems 
in  specific  cases;  and  a  generalized  repair  model,  drawn  in  CPM  format.  New 
information  generated  would  include  damage  and  repair  data  for  power  plants 
designed  to  conform  to  an  earthquake  code,  such  as  the  one  supplying  San  Jose. 
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While  this  power  plant  is  technically  outside  the  San  Jose  area,  it  should 
nevertheless  be  analyzed  because  it  will  be  a  critical  postattack  input. 
New  Orleans  has  an  "outdoor"  generating  plant,  which  could  yield  new 
data  if  analyzed, 

The  identification  of  the  controlhousc  and  cooling  tower  as  the¬ 
re  finery  weak  links  is  one  of  the  most  significant  findings  of  this  study. 
Because  they  fail  at  low  overpressures,  1.0  -  1.5  pSi,  thereby 
destroying  the  automatic  instrumentation  and  cooling  capacity  without 
which  the  refinery  cannot  operate,  they  present  an  excellent  opportunity 
for  hardening.  Relatively  little  effort  should  be  required  to  strengthen 
the  controlhouse.  particularly  the  roof,  so  as  to  reduce  vulnerability  to 
a  level  more  consistent  with  that  of  the  processing  units  whose  operation 
largely  depends  upon  the  controlhouse.  Failure  of  the  controlhouse  and 
cooling  tower  — if  accompanied  by  failure  of  processing  units -would 
probably  not  lengthen  the  total  refinery  repair  time  since  processing 

units  have  longer  repair  times.  A  controlhouse  hardening  study  could 

72 

use  techniques  employed  in  prior  industrial  hardening  studies. 


Key  essential  inputs  to  petroleum  merit  further  study.  These  are 
primarily  within  the  chemical  industry  and  include  sulfuric  acid,  tetra¬ 
ethyl  lead,  and  chlorine. 

Resonant  periods  of  vibration  of  buildings  deserve  further  investi¬ 
gation  because  of  insufficient  data,  at  present,  to  obtain  precise  results. 
Failure  of  concrete  slabs,  such  as  the  administration  building  floor,  merit 
further  investigation.  In  connection  with  these  projected  studies,  it  is 
anticipated  that  the  computer  program  for  analysis  of  structures  subjected 
to  dynamic  loading  will  be  improved  and  published. 
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Less  than  a  third  of  the  above-ground  crude'  oil  supply  is  readily 
available  using  conventional  techniques,  because  most  of  this  crude  is 
line  fill  in  pipelines,  or  in  tank  bottoms,  or  otherwise  unavailable. 
Techniques  for  its  postattack  recovery  could  be  analyzed  or,  if  no  such 
techniques  art-  known,  perhaps  they  could  he  developed. 

Liquid  petroleum  gas  appears  to  be  the  most  feasible  substitute 
for  petroleum  and,  as  such,  merits  further  and  more  detailed  consider¬ 
ation.  Specific  areas  of  interest  include  the  possibility  of  increasing 
production  of  LPG’s  principal  component,  propane,  and  the  conversion 
of  combined  natural  gasoline  -  LPG  to  straight  LPG. 
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APPENDIX  A 
PLANT  DESCRIPTIONS 


A.  1  Baton  RougL  Refinery:  Introduction 

The  refinery  of  Humble  Oil  and  Refining  Company  at  Baton  Rouge  is 
studied  in  some  detail  because,  while  no  single  refinery  can  be  considered 
typical,  it  is  the  largest  in  the  United  States  and  has  process  units  covering  a 
wide  range  of  products  and  processes.  The  portions  of  the  refinery  devoted  to 
the  production  of  motor  fuels  — motor  gasoline,  aviation  gasoline,  jet  turbine 
fuels,  and  middle  distillates  —  are  singled  out  for  emphasis  because  of 
their  pertinence  to  the  current  study.  Lubricating  oils  and  petrochemicals  will 
be  covered  in  a  later  phase  of  the  program. 

A.  1.1  General 

Layout 


The  Baton  Rouge  refinery  is  on  the  east  bank  of  the  Mississippi 
River,  about  two  miles  upstream  from  the  state  capitoL  It  employs  about 
4,300  people.  The  plot  plan  is  roughly  square,  about  1  1/2  miles  on  a  side 
extending  to  the  banks  of  the  river  if  the  dock  area  is  included.  Additional 
facilities  are  the  Anchorage  tank  farm  across  the  river  and  the  Maryland 
tank  farm  at  North  Baton  Rouge.  There  are  also  extensive  storage  facilities 
at  the  refinery  itself,  and  natural  gas  liquids,  (ethylene,  propane,  isobutarie) 
are  stored  under  pressure  at  the  Sorrento  salt  dome  storage  area,  about  30 
miles  away.  The  process  units  are,  in  general,  grouped  at  the  center  of 
the  plot,  with  the  storage  tanks  and  blending  fields  surrounding  them  to  the 
north  and  south.  The  administrative  and  maintenance  buildings  are  on  the 
east,  and  the  dock  area,  including  the  Plantation  Pipeline  Company  pumping 
station  facilities,  are  on  the  west. 

Buildings 

The  principal  buildings  are  grouped  along  the  eastern  side  of  the 
plot  facing  Scenic  Highway.  They  are  the  main  office  building,  the  cafeteria 
behind  it,  the  Esso  laboratories  just  to  the  west,  the  employee  relations  and 
medical  building  just  to  the  south,  and  the  Central  Mechanical  Building  south 
of  all  these  and  also  facing  Scenic  Highway.  The  old  boilerhouse  was  shut 
down  in  1960  and  is  scheduled  for  demolition.  Throughout  the  refinery  there 
are  also  numerous  one-story  brick  control  centers  and  light  framed  shed 
style  buildings  covering  certain  items  of  process  equipment.  The  tetraethyl 
lead  plant  weigh  building  is  a  one-story  brick  structure  located  on  the  north¬ 
ern  edge  of  the  plot  connected  by  pipeline  to  the  Ethyl  Corporation  manufactur¬ 
ing  facilities  which  are  just  north  of  the  refinery. 

Central  mechanical  building 

This  is  primarily  a  maintenance  and  repair  shop  and  spare  parts 
storage  warehouse,  serving  the  entire  refinery.  Because  of  its  size  and  the 
excellence  and  completeness  of  its  facilities,  it  would  be  a  factor  of  major 
importance  in  the  postattack  recovery  of  the  refinery  and  even  for  other 
plants  in  the  area.  The  structure  is  really  two  buildings,  one  built  in 
1948,  the  other  in  1956.  Both  are  steel  frame  structures  with  brick  walls 
extending  ten  feet  up  and  transite  panels  above  this.  Facilities  include  the 
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machine  shop,  pipe  shop,  bniler  shop,  welding  shop,  sheet  metal  shop, 
electrical  shop,  heat  e \chunge r  repair  shop  (retailing,  converting,  clean¬ 
ing),  automotive  and  motorized  equipment  maintenance  shop,  paint  shop 
and  spray  booth,  carpenter  shop,  instrument  shop,  and  spare  parts 
storage  with  automatic:  conveyor.  There  are  three  15-ton  overhead 
traveling  cranes,  one  in  each  bay,  and  lifting  derricks  at  each  column 
location.  The  slightly  pitched  roof  is  corrugated  metal  covered  with 
insulation,  tar  and  gravel. 

Process  equipment 

The  principal  processing  units  at  the  refinery  are  separated  into 
two  main  division,  chcmicai  and  petroleum. 

Chemical:  These  consist  of  the  Butyl  Department,  Cracking  Department, 

and  Alcohol  Department. 

Petroleum:  These  consist  of  the  Distillation  and  Cracking  Department,  with 
eight  crude  stills  of  which  six  are  normally  operated,  and  two  fluid  catalytic 
crackers,  the  Light  Ends  Department,  with  three  alkylation  units,  with  one 
stirred  reactor  (II2SO4)  alkylation  unit,  the  gas  compression  and  light  ends 
recovery  units,  one  powerformer,  one  polymerization  unit,  one  delayed 
coking  unit,  the  treating  facilities,  and  the  Lube  and  Wax  Department.  These 
petroleum  units  are  described  more  fully  in  section  A.  1.  2. 

The  processing  equipment  associated  with  these  units  groups  into  the 
following  categories: 

Vertical  reactors  and  pressure  vessels 
Vertical  fractionating  towers 
Heat  exchangers  and  condensers 
F urnaces 

Horizontal  drums  and  reactors 

Piping 

Controls 

Pumps,  compressors,  turbines  and  motors 
Attendant  structures 

Other  equipment  which  is  indirectly  associated  with  processing  units 
consists  of  storage  tanks,  pipe  bands  and  pipelines,  and  flare  stacks  supported 
by  either  steel  towers  or  guy  wires. 

Vertical  reactors  and  pressure  vessels 

The  most  important  of  these  are  the  reactor  and  regenerator  in  fluid 
catalytic  cracking  units  2  and  3.  They  are  massive  vessels,  supported  by 
the  attendant  structure.  The  regenerator  is  located  high  up  in  the  unit,  and  is 
rather  vulnerable  to  blast  damage. 
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In  the  pipe  stills,  both  the  atmospheric  fractionating  tower  and  the 
vacuum  fractionating  tower  are  supported  at  their  bases  independently  of  the 
attendant  structure  which  surrounds  them.  They  are  retained  by  anchor  bolts 
at  their  bases  imbedded  in  a  3 5- foot-high  reinforced  concrete  foundation  framp. 

In  the  light  ends  units  the  absorbing,  debutanizing,  and  stripping 
towers  are  m.  anted  free-standing,  either  on  a  reinforced  concrete  pedestal  or 
a  reinforced  icrete  foundation  frame. 

The  fractionating  towers  in  the  three  alkylation  units  are  similarly 
mounted.  The  205  foot  superfractionating,  or  cieisobutanizing,  tower  is  the 
tallest  of  these  and  is  mounted  on  a  reinforced  concrete  pedestal  with  a  com¬ 
bination  spread  footing. 

.Attendant  structures 

The  structures  surrounding  various  processing  units  are  primarily 
for  the  purpose  of  providing  support  for  auxiliary  equipment  and  access  for 
maintenance,  observation  and  control.  In  the  pipe  stills,  the  attendant 
structure  is  independent  of  the  support  structure  for  the  process  units.  It  is 
an  open  Steel  structure  with  shear  members  for  diagonal  bracing  and  has  plat¬ 
forms  and  catwalks  at  various  levels  with  stairways  between.  The  two 
catalytic  cracking  units  have  13 -story  structures  with  an  elevator  on  one 
corner  and  support  most  of  the  auxiliary  process  equipment,  except  for  the 
fractionator. 

In  the  light  ends  and  alkylation  units,  the  fractionating  towers  are 
generally  equipped  with  ladders  and  platforms  attached  directly  to  the  towers. 

In  all  units,  steel  structures  within  35  feet  of  the  ground  are  fire¬ 
proofed  with  a  coating  of  concrete. 

Heat  exchangers,  condensers  and  horizontal  drums 

These  are  generally  supported  by  reinforced  concrete  cradles  or 
columns  with  spread  footings. 

In  the  #3  alkylation  unit,  the  horizontal  sulfuric  acid  reactors  have 
electric  motor  driven  stirring  paddles  inserted  along  their  length  from  above. 

In  general,  the  horizontally  mounted  vessels  have  a  low  profile  and 
are  mounted  close  to  the  ground  where  there  would  be  a  considerable  amount 
of  shielding  from  blast  and  thermal  damage. 

Controls 

Most  processing  equipment  controls  are  pneumatically  actuated  and 
are  "fail  safe";  that  is,  loss  of  instrument  air  will  operate  the  valves  and 
equipment  in  the  safest  way.  Even  though  all  electrical  equipment  used  in 
processing  areas  is  of  explosion-proof  construction,  there  is  nevertheless 
greater  hazard  in  its  use  than  with  pneumatic  equipment. 
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The  controlhouses,  or  headquarters  buildings,  contain  most  of 
the  temperature  and  pressure  recorders,  gauges,  flow  meters,  pilot  lamps, 
switches,  alarms,  etc.  .  pertaining  to  the  transmitters  and  transducers 
mounted  at  the  controlled  devices  in  the  process  areas. 

Several  electric  motor  driven  air  compressors  scattered  through¬ 
out  the  refinery  provide  compressed  air  for  the  pneumatic  controls.  During 
the  shutdown  following  the  power  failure  in  April  1060,  it  was  the  loss  of 
this  air,  as  much  as  anything  else,  that  actually  shut  down  the  plant.  (For 
discussion  of  the  shutdown,  see  section  3.  10. ) 

Storage  tanks 

Storage  tanks,  meeting  the  American  Petroleum  Institute  standards, 
cover  a  range  of  sizes  and  are  of  three  types:  floating  roof,  cone  roof,  or 
spherical.  The  cylindrical  tanks  are  welded,  riveted,  or  seal-welded  (welded 
over  or  around  the  rivets  to  seal  against  leaks).  The  newer  tanks  are  all- 
welded.  The  spherical  tanks  are  for  storage  of  light  hydrocarbons  and  LPG 
under  pressures  up  to  110  psig  for  the  5,000  barrel  tanks  and  30  psig  for  the 
30,000  barrel  tanks.  They  are  of  all-welded  construction  and  mounted  on 
legs.  The  cone  roof  tanks  have  a  pressure  vacuum  vent  mounted  on  the  roof 
which  permits  pressure  equalization  inside  the  tank,  and  the  seam  welds  join¬ 
ing  the  roof  to  the  wall  are  intentionally  weak,  to  provide  additional  safety 
against  internal  pressure  buildup.  Their  roofs  have  been  known  to  buckle 
when  the  vents  became  plugged.  The  vapors  which  occasionally  escape  could 
possibly  be  ignited  by  thermal  radiation  emanating  from  a  nuclear  explosion. 
(For  discussion  of  thermal  radiation,  see  section  3.  8. ) 

Gasoline  is  blended  by  batch.  Blending  tanks  have  electrically- 
driven  mixer  blades  inserted  into  the  tank  at  such  an  angle  as  to  produce  a 
rotational  movement  of  the  product.  All  grades  of  gasoline  must  be  blended, 
the  formula  varying  with  the  requirements  in  the  season  and  the  geographical 
areas  where  they  will  be  sold,  and  this  operation  requires  about  8  hours.  The 
ground  area  around  each  tank  is  saucer  shaped  and  surrounded  by  a  dike  (low 
wall)  designed  to  contain  50%  of  the  tank  capacity. 

A.  1. 2  Operation  and  flow 

In  this  section  a  few  key  processes  and  their  units  ai'e  described 
in  conjunction  with  flow  charts.  (See  Figures  A-l  through  A- 9).  The  pro¬ 
cesses  that  have  been  selected  are  those  considered  essential  to  gasoline  and 
fuel  production.  The  units  described  here  are  those  which  were  analyzed  in 
detail  at  the  refinery  as  being  representative  of  their  group. 

Crude  supply 

The  two  tank  farms  supplying  the  Baton  Rouge  refinery  are  at 
North  Baton  Rouge  and  across  the  river  at  Anchorage.  The  five  principal 
crude  producing  areas  for  this  refinery  are  in  Mississippi,  northern  Louisiana 
and  three  in  southern  Louisiana,  of  which  one  is  offshore.  There  are  seven 
river  crossing  pipelines  underneath  the  river.  The  grade  of  crude  used  at 
Baton  Rouge  is  classified  a  "sweet1  crude  — low  in  hydrogen  sulfide.  A 
"sour"  crude  is  one  having  greater  than  0.05  cu.  ft.  3  of  dissolved  H2S  per  100 
gallons,  and  is  dangerous  because  of  toxicity.  Such  a  crude  is  not 
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excessively  corrosive  unless  H2S  content  exceeds  0.5  cu.ft.  per  100  gallons. 
Sweetening,  or  treating,  processes  are  used  for  sulfur  and  Ii^S  removal. 


Capacity 


Refining  capacity,  as  of  January  1,  1965,  was  362,000  barrels/cal¬ 
endar  day,  or  375,000  barrels /stream  day,  the  largest  in  the  United  States. 
This  is  further  broken  down  as  follows  (10): 


Charge  capacity —(Barrels/stream  day) 


Vacuum  distillation 
Thermal  operations 

Catalytic  cracking 

Catalytic  reforming 
Hydrogen  treating: 

Production  capacity  — 


141, 

40, 

22, 

175, 

11, 

38, 

Solvent  feed 

3, 

Lube  oil  feed 
Wax  feed 

11, 

(Barrels /stream  day) 


600 

000  (gas-oil  cracking) 
500  (delayed  coking) 
400  (fresh  feed) 

700  (recycle) 

000  (powerforming) 

800  (Esso  Hydrofining) 
000  (Esso  Hydrofining) 
800  (Esso  Hydrofining) 


Alkylation 

Polymerization 

Lubes 

Coke  (tons) 
Asphalt 


23,800  (H2S04) 
7,800  (catalytic) 
12,000 
1,125 
12,300 


Distillation 


Pipe  stills  No.  7,  8,  and  9,  are  large  modern  units,  with  crude 
capacities  from  70-95,000  barrels  per  day.  There  is  an  atmospheric  dis¬ 
tillation  section  and  a  vacuum  distillation  section,  each  with  its  own  gas-fired 
furnace.  The  crude  passes  through  an  electrostatic,  20,000  volt  desalter, 
where  the  salt  is  removed  at  a  rate  of  approximately  50  lbs  per  1000  barrels, 
then  through  the  preflash  tower  at  35  psig  and  325°F.  Next  it  passes  through 
the  atmospheric  furnace  and  into  the  atmospheric  fractionating  tower  where 
the  pressure  is  7-8  psig.  Four  or  five  side  streams  are  typical;  this1  tower 
has  five,  which  are:  1)  heavy  naphtha,  which  goes  to  catalytic  reforming  charge, 
2)  water  white,  3)  a  solvent  cut  (or  kerosine),  4  and  5)  light  and  heavy  gas  oil 
which  go  into  diesel  blending  or  catalytic  cracking.  The  overhead,  or  light 
naphtha  and  light  ends,  go  to  the  debutanizing  and  splitter  units  for  debutanizing, 
depropanizing  and  deethanizing.  The  side  streams  pass  through  the  steam 
strippers,  and  the  reduced  crude  is  passed  into  the  vacuum  furnace  and  distilled 
again  in  the  vacuum  tower,  at  750°-800of  under  about  29  inches  of  mercury 
vacuum,  pulled  by  surface  condensers  and  steam  jet  ejectors.  The  vacuum 
fractionating  tower  has  three  distillate  vacuum  gas  oil  streams  ■  which  go  to 
catalytic  cracker  charge  and  a  vacuum  residuum  to  coker  charge.  There  are 
thus  no  products  of  the  atmospheric  fractionator  that  are  used,  as  is,  for  motor 
gasoline. 
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The  controls  on  the  pipe  stills  arc  almost  completely  pneumatic.  The 
drives  arc  botii  electric  and  steam,  hut  No.  b  pipe  still  has  only  steam  drives 
and  could  thus  be  operated  without  electric  power,  whereas  the  others  could 
not. 


The  fractionating  towers  are  mounted  on  reinforced  concrete  foundation 
frames  35  feet  high,  as  described  elsewhere*.  The  Service,  nr  attendant, 
structures,  are  steel  and  are  not  attached  to  the  towers.  The  furnaces 
are  mounted  on  steel  columns,  surrounded  by  steel  structures. 

Catalytic  cracking 

The  first  fluid  catalytic  cracker  was  built  and  operated  at  the  Baton 
Kouge  refinery.  Now  shut  down  and  being  dismantled,  it  was  built  in  1041, 
and  designated  No,  1  Catalytic  Cracker.  There  are  at  present  two  others, 
built  in  1943  and  1944.  both  on  stream,  one  of  them  continuously  for  nearly 
four  years,  a  possible  record. 

The  support  structures  provide  access  to  the  equipment  and  support  for 
tile  reactor  and  regenerator  vessels  and  associated  valves,  piping,  blowers, 
motors,  etc.  The  regejTerator  is  located  high  in  the  structure,  its  base  at 
about  150  feet  above  ground  level,  and  presents  one  of  the  more  obviously 
vulnerable  pieces  of  equipment.  The  reactor  vessel  is  below  it,  near  the 
center  of  the  structure. 

The  two  crackers  are  basically  identical  except  with  respect  to  their 
fractionating  towers.  Originally  the  fractionators  were  on  the  south  side 
of  the  structure,  but  recently  No.  3  catalytic  cracker  . was  furnished  with  a 
new  fractionator,  and  this  was  placed  just  east  of  the  structure  on  its  own 
foundation.  The  original  fractionator  on  No.  3  catalytic  cracker  is  still  in 
place  but  disconnected. 

The  support  structures  for  these  units,  having  been  built  under  war¬ 
time  emergency  conditions  and  shortages,  are  a  bit  cumbersome  and  redun¬ 
dant.  The  units  themselves,  being  early  examples,  have  been  modified 
repeatedly  and  have  a  somewhat  more  cluttered  appearance  than  recent 
vintage  cat  crackers. 

The  so-called  "fluid"  catalyst  supplied  by  Davison  Chemical  Division 
of  Grace  Chemical  Corporation  is  actually  a  fine  alumina— silica  powder  * 
which,  when  inserted  into  a  high-velocity  high- temperature  stream  of 
vaporized  oil,  steam,  or  air,  behaves  like  a  fluid.  If  flow  should  stop,  as 
in  emergency  shutdown,  the  catalyst  "slumps"  and  behaves  like  a  solid, 
plugging  lines. 

The  catalyst  circulates  at  a  rate  of  50-60  tons/ minute,  and  about  2 
or  3  tons  per  day  are  lost  through  the  regenerator  stack.  Periodically, 
spent  catalyst  is  drawn  off,  and  new  catalyst  is  added.  There  are  two 
principle  flow  paths  in  the  cracking  process.*  that  of  the  oil  and  that  of  the 
catalyst.  They  join  just  before  entering  the  reactor,  pass  together  into 
the  reactor,  then  the  catalyst  drops  from  the  reactor  through  the  stripper 
and  is  airhlown  into  the  regenerator  where  the  coke  is  burned  off  while  the 
cracked  hydrocarbons  are  fed  into  the  fractionator. 
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The  oil  feed  for  the  catalytic  crackers  is  the  light  and  heavy  gas  oil 
streams  from  the  atmospheric  and  vacuum  pipe  stills.  The  cracking  process 
is  essentially  a  means  of  breaking  up  these  heavier  hydrocarbon  molecules 
coming  out  of  the  pipe  stills  so  that  they  can  in  large  part  also  be  used 
ultimately  as  stocks  for  motor  gasoline,  along  with  the  lighter  fractions 
from  the  pipe  stills. 

Operating  pressures  in  the  catalytic  crackers  are  relatively  low- 
30  psig  in  tile  reactor,  10  psig  in  the  regenerator,  40  psig  in  the  standpipe 
feeding  the  reactor,  and  12-15  psig  in  the  fractionator.  Temperatures, 
however,  are  relatively  high,  being  250°  -  7Q0°F  in  the  fractionator,  90Q°F 
in  the  reactor,  and  1160°F  in  the  regenerator  where  the  coke  is  burned  off 
the  catalyst. 

The  lighter  fractions  coming  out  of  the  catalytic  cracker  fractionating 
towers  go  to  the  light  ends  units  where  they  are  further  fractionated  to 
produce  motor  gasoline,  and  aviation  gasoline.  The  higher  pressures  in  the 
light  ends  recovery  units  (25-300  psig)  require  that  the  light  hydrocarbons  be 
first  compressed  from  the  12-15  psig  of  the  catalytic  cracking  fractionator. 
This  is  done  by  a  group  of  two-stage  compressors  (known  as  GLA's)  run  by 
natural  gas  engines  and  located  near  the  catalytic  crackers. 

Light  ends 

Light  ends,  consisting  of  material  ranging  from  methane  to  motor 
gasoline,  produced  at  the  pipe  stills,  catalytic  crackers,  powerformers, 
cokers,  and  natural  gas  field  plants  are  processed  in  several  light  ends  units 
to  produce  a  variety  of  end  products  —  mostly  motor  gasolines  and  liquid 
petroleum  gases. 

A  typical  light  ends  unit  consists  of  an  absorber  tower,  splitter, 
debutanizer,  depropanizer  and  rerun  tower;  also  pumps,  heat  exchangers, 
and  sulfur  scrubbers.  The  primary  product  streams  are  the  overhead  gas 
from  the  absorber  which  is  further  processed  in  a  high  pressure-low 
temperature  unit  for  ethylene  recovery,  the  depropanizer  overhead  stream 
which  is  fed  to  a  polymerization  unit  to  produce  polymer  gasoline,  the  de¬ 
propanizer  bottoms  which  is  alkylation  unit  feedstock,  and  various  motor 
gasoline  fractions.  A  majority  of  the  vessels  in  the  light  ends  area  operate 
at  pressures  greater  than  50  psig,  with  some  operating  as  high  as  300  psig. 
The  vessels,  therefore,  have  strong  walls  making  them  less  susceptible  to 
collapse  from  blast.  However,  any  leaks  which  might  develop  from  blast 
damage  would  be  more  serious  here  than  in  other  parts  of  the  refinery. 

These  units  were  constructed  in  the  middle  1950s  and  have  a  rela¬ 
tively  uncluttered  appearance.  The  towers  are  free  standing  on  their  foun¬ 
dations  and  are  unencumbered  with  attendant  structures.  Each  tower  has 
ladders,  platforms  and  piping  attached  to  it  with  brackets,  rather  than  by  a 
separate  structure. 
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Alkylation 


The  alkylation  process  is  the  most  practical  method  of  producing 
high  octane  alkylate,  or  iso-octane,  the  standard  used  to  measure  antiknock 
value,  It  is  also  a  valuable  process  in  the  production  of  compounds  used  in 
gasoline  inhibitors,  lubrication  oil  additives  and  synthetic  detergents.  The 
chemical  reaction  is  the  uniting  of  a  saturated,  branched-chain  hydrocarbon 
(isobutane)  with  an  olefin  hydrocarbon  (propylene,  butylene  or  amylene)  to 
Cjtain  a  product  rich  in  isomeric  octanes  (iso-octane).  The  use  of  a  catalyst, 
either  sulfuric  acid,  as  at  Baton  Rouge,  or  hydrofluoric  acid,  allows  the 
reaction  to  take  place  at  a  low  temperature.  Refrigeration  brings  down  the 
temperature  in  the  reactors  to  about  40°F.  There  are  two  electric-motor- 
driven  refrigeration  compressors  and  a  steam-driven  one.  The  reactors  in  the 
No.  3  alkylation  unit  are  of  the  stirred  reactor  type:  there  are  four  horizontal 
drums,  or  reactors,  each  with  several  electric-motor-driven  stirring  paddles 
inserted  into  them  from  above.  The  reactor  product  passes  through  settling 
drums,  is  neutralized  by  caustic,  and  then  into  fractionation,  where  unreacted 
isobutane  is  separated  in  the  deisobutanizer,  and  butane  and  propane  are 
separated  in  the  debutanizer  and  depropanizer  towers,  respectively.  The 
fractionating  towers  in  the  alkylation  units  are  similar  in  design  and  appear¬ 
ance  to  those  in  the  light  ends  recovery  units,  except  for  the  deisobutanizer, 
which  with  its  205  feet  of  height  is  much  taller. 

Product  distribution 


The  dock  and  the  Plantation  Pipeline  Company  pumping  station  facilities 
are  located  on  the  river  bank  at  the  western  side  of  the  plot.  The  piers  are  in 
three  sections,  one  for  barges,  two  for  tankers,  and  in  total  are  about  1800 
feet  long.  They  are  steel  pile  frame  structures  supporting  a  pier  surface  of 
concrete. 


The  products  are  transported  by  tanker  (34%),  by  pipeline  (34%),  by 
barge  (29%),  and  by  truck  (3%). 

Tankers  are  loaded  from  the  piers  by  hoses  connected  to  pipe  fittings 
on  the  tanker  (in  the  case  of  Esso  tankers)  and  pipeline  terminals  on  the  pier. 
Mating  pipe  flanges  are  not  necessary,  because  in  some  cases  tankers  are 
loaded  through  an  open  hatch  to  avoid  contamination.  Several  derricks  on 
the  piers  are  used  for  manipulating  the  heavy  hoses. 

A.  1.3  Utilities 

The  importance  of  utilities  has  been  demonstrated  by  the  situation 
that  developed  in  1960  as  a  result  of  a  power  failure  at  Gulf  States  Utilities 
(see  3.10).  Included  in  utilities  are  the  supply  of  water,  steam,  electric 
power,  and  natural  gas. 

Water  is  supplied  from  several  wells  located  throughout  the  plant. 
Electric -motor -driven  pumping  units  are  installed  above  ground  at  each 
well.  The  water  supply  is  plentiful,  clean  and  pure,  with  the  greatest 
volume  used  for  cooling  water  in  heat  exchangers  and  condensers. 
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Figure  A . 


River  water  is  used  to  a  limited  extent  but  could  be  used  more 
extensively  in  an  emergency,  although  in  most  cases  of  loss  of  well  water 
due  to  power  failure,  the  river  water  would  also  be  unavailable  because 
its  pumps  are  also  electric  motor  driven.  River  water  must  be  treated 
for  removal  of  any  oil  it  has  picked  up  before  being  returned  to  the  river. 


All  steam  is  supplied  by  the  adjacent  Gulf  States  Utilities  Plant. 
Humble  Oil  and  Refining  Company  contracts  for  the  use  of  150  psi  exhaust 
steam  from  the  electric  utility  company  and  finds  this  more  economical 
than  maintaining  and  supplying  steam  from  their  own  facilities.  All  steam 
line  piping  is  carried  on  steel  supports  throughout  the  plant. 

Electric  power  is  primarily  supplied  by  the  utilities  plant  under  a 
contract  basis.  Since  the  power  failure  in  1960,  (see  section  3.10)  ad¬ 
ditional  precautions  have  been  taken  by  Gulf  States  to  insure  that  power  is 
available  from  several  sources,  through  interconnecting  links  in  the  na¬ 
tional  network  of  power  line  facilities.  The  likelihood  of  a  power  failure 
is  now  very  remote  indeed.  The  natural  gas  used  for  heating  require¬ 
ments  throughout  the  plant  is  piped  into  the  area.  Produced  refinery  gases 
are  also  mixed  with  this  and  used  in  the  furnaces  for  heating  the  oils  in 
process.  It  is  generally  believed  that  the  sources  of  supply  are  adequate 
for  all  emergencies.  The  overhead  distribution  lines  around  the  plant  are 
relatively  vulnerable,  but  these  would  probably  not  fail  at  a  greater  rate, 
as  a  result  of  a  nuclear  blast,  than  the  equipment  which  they  feed. 


A, 2  Whiting  Refinery:  Introduction 


The  Whiting  refinery  (207,000  b/cd),  located  an  the  southern  shore  of 
Lake  Michigan,  is  analyzed  because  in  1955  it  suffered  a  major  process  unit 
explosion,  and  a  petroleum  liquids  fire  which  lasted  8  days  (see  3.8.2),  Started 
in  1880,  the  refinery  has  been  almost  completely  renovated  and  retains  very 
little  of  tlie  older  equipment,  mostly  in  lubes  and  heavy  oils  departments. 

A.  2.1  General 

The  processing  facilities  consist  of  crude  distillation,  fluid  catalytic 
cracking,  ultraforming,  H2SO4  alkylation,  vapor  recovery  units,  delayed 
coking,  heavy  oils  distillation,  propane  and  methyl -ethyl -ketone  (MEK) 
dewaxing,  phenol  extraction,  treating,  and  in-line  blending.  Other  fa¬ 
cilities  are  the  tank  farms,  crude  pumping  station  and  manifold,  two 
power  stations,  two  pumping  stations  for  lake  water,  a  central  air  com¬ 
pressor  plant,  a  maintenance  building,  and  the  engineering,  research  and 
administrative  buildings. 

Layout 


Since  the  fire  in  1955,  the  tank  fields  have  been  moved  farther 
away  from  processing  units,  which  are  now  grouped  in  the  northern  part  of 
the  refinery  near  the  lake  front.  Tank  fields  are  to  the  south  and  south¬ 
west,  and  engineering  and  administration  buildings  are  on  the  west.  The 
water  pumping  stations  are  in  the  north  near  the  lake  shore,  and  the  two 
power  stations  are  near  the  center  of  the  processing  area. 

A.  2.  2  Operation  and  flow 

In  this  section,  processes  are  described  which  contribute  to  the 
production  of  motor  fuels  and  lubes.  In  order  to  avoid  repetition,  there 
are  no  descriptions  duplicating  those  of  Baton  Rouge. 

Crude  supply 

The  Whiting  refinery  is  set  up  to  handle  both  sour  and  sweet  crudes, 
received  entirely  by  pipeline  from  Texas  and  Oklahoma,  No.  12  pipe  still 
handles  a  sweet  crude  and  considerable  modification  would  be  required  to 
convert  to  sour.  No.  10  and  11  pipe  stills  are  designed  for  sour  and  can 
therefore  handle  either.  The  sour  crude  is  high  in  sulfur  and  hydrogen 
sulfide.  A  considerable  amount  of  sulfur  is  produced  at  the  refinery,  as 
a  byproduct. 

Distribution  of  crude  throughout  the  refinery  is  handled  at  the  cen¬ 
trally  located  crude  station  and  manifold.  The  pump  controls  are  in  a 
small  one-story  brick  building  from  which  the  flow  of  crude  to  all  processing 
units  is  controlled.  Loss  of  this  vital  system  would  mean  shutdown  of  pro¬ 
cess  units.  Although  the  building  housing  the  controls  is  fairly  vulnerable, 
the  pumps  and  pipelines  themselves  are  not,  apd  crude  supplies  could  there¬ 
fore  probably  be  restored  to  the  processing  units  on  an  emergency  basis 
by  manual  control  if  the  building  and  automatic  controls  in  it  were  destroyed. 
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Capacity 


Refinery  capacity,  as  of  January  1,  1965,  was  207,000  b/cd  or 
215,000  b/sd  (10),  The  breakdown  by  process  is  as  follows: 

Charge  capacity — (Barrels /stream  day) 


Vacuum  distillation 
Coking  operations 
Catalytic  cracking 

Catalytic  reforming 
Hydrogen  treating 


113,000 

30,000 

111,000  (fluid)  (fresh) 

12,000  (recycle) 

43,000  {Ultraforming) 

54,000  (naphtha  Ultrafining) 


Production  capacity  —  (Barrels /stream  day) 


Alkylation 

Lubes 

Coke 

Asphalt 


15,000  (H9SO4  stirred) 
7,400 

1,470  tons  (delayed) 
15,500 


Crude  distillation 


The  No,  12  pipe  still  is  a  large,  modern  unit  with  a  crude  capacity 
of  140,000  b/d.  The  unit  is  automatically  monitored  and,  to  a  moderate 
extent,  controlled  by  a  digital  computer  located  in  the  controlhouse  next 
to  the  unit.  The  unit  can  be  operated  without  the  computer  but  not  without 
the  controls,  because  manual  control  is  not  safe, 


Catalytic  cracking 

The  two  fluid  catalytic  crackers  were  built  in  the  late  1940s  and  are 
similar  to  the  units  at  Baton  Rouge,  although  slightly  newer.  The  regener¬ 
ator,  reactor  and  fractionator  are  mounted  on  their  own  independent  re¬ 
inforced  concrete  foundations,  and  surrounded  by  a  steel  structure  of  plat¬ 
forms  and  stairways  with  two  elevators.  The  regenerator  is  mounted  at  a 
lower  position  in  the  complex  than  at  Baton  Rouge  and  for  this  reason  would 
probably  be  less  susceptible  to  overturning  from  blast.  The  two  catalytic 
crackers,  PCC  500  and  600  .are  similar,  except  that  FCU  500  has  been 
equipped  with  a  carbon  monoxide  boiler,  producing  350,000  lbs/hr.  of  400 
psi  steam  with  waste  heat  from  the  regenerator.  Most  of  this  steam  is 
used  on  the  unit  itself,  with  any  excess  being  fed  into  the  400  lb.  steam 
supply  system  of  the  refinery.  This  cannot  be  considered  as  an  emergency 
stream  supply  in  the  event  the  power  stations  were  down  because  the  cata¬ 
lytic  crackers  would  also  be  down  as  a  result  of  electric  power  failure. 


Light  ends 

There  are  two  vapor  recovery  units  (VRU  100  and  200)  located 
opposite  the  two  catalytic  crackers.  These  units  have  absorbing,  stripping 
and  depropanising  towers  and  can  each  take  their  feed  from  either  or  both 
of  the  cat  crackers.  Blast  vulnerability  would  probably  be  the  same  as  for 
the  light  ends  recovery  units  at  Baton  Rouge, 


A-20 


A  third  vapor  recovery  unit  (VRU  300)  receives  feed  from  crude 
distillation  units  or  other  process  units  and  is  equipped  with  absorber, 
stripper,  depropanizing  and  debutanizing  towers.  It  is  therefore  a  more 
complete  light  ends  recovery  plant  than  VRU  100  and  VRU  200, 

Alkylation 

Th-  sulphuric  acid  alkylation  unit  is  a  relatively  new  unit  (1961) 
with  three  stirred  reactors.  The  deisobutanizing  tower  is  150  ft,  high  x 
W  20  ft.  diameter,  located  next  to  the  reactors  and  the  controlhouse.  The 

reactor  vessels  are  mounted  on  fireproofed  cradle-type  foundations  and 
hare  two  sections:  the  reactor  section  and  the  settling  section.  Next  to 
the  deisobutanizing  tower  there  is  a  deisobutanizer  reflux  drum,  mounted 
on  a  fireproofed  cradle,  a  debutanizer  tower  and  a  depropanizer  tower, 
both  smaller  than  the  deisobutanizer.  The  deisobutane  reflux  drum, 
fairly  vulnerable  to  blast,  is  mounted  on  two  21-foot-high  "T"  piers  and 
contains  highly  volatile  isobutane  under  pressure.  Fire  would  be  a 
very  likely  result  from  rupture  of  any  of  the  connecting  lines,  although 
the  drum  itself  would  not  be  a  difficult  item  to  replace. 

Lubricants 

The  lubes  plant,  producing  lube  oils,  greases,  and  wax,  contains 
the  heavy  oils  pipe  still,  the  MEK  and  propane  dewaxing  plants,  and  the 
phenol  extraction  plant.  Feed  for  the  pipe  still  is  gas  oil  from  #12  pipe 
•  still  vacuum  fractionator,  or  it  could  be  from  #11  pipe  still  if  this  were 

on  sweet  crude.  Any  feed  which  the  lubes  plant  cannot  use  goes  to  the 
catalytic  cracking  units. 

Of  the  three  processes— fractionation,  phenol  extraction,  and  de¬ 
waxing— only  the  phenol  extraction  could  be  skipped  under  emergency  con¬ 
ditions,  as  its  predominant  purpose  is  to  provide  viscosity  control  inde¬ 
pendent  of  temperature  such  as  is  found  in  the  so-called  multi  viscosity 
lube  oils.  The  pipe  still  is  essential  for  production  of  the  different  vis¬ 
cosities  or  grades  of  oils— SAE  10W,  20  or  30—  and  the  dewaxing  process 
.  is  required  to  remove  wax  from  the  lube  oils  which  would  otherwise  be 

*  deposited  on  the  inside  surfaces  of  engines  at  temperatures  below  100°F. 

The  MEK  dewaxing  process  employs  methyl-ethyl-ketone  as  the 
solvent.  The  wax  is  precipitated  out  as  a  solid  in  refrigerated  drums  and 
then  removed  in  cylindrical,  rotating,  filters. 


The  pipe  still  for  heavy  oils  is  probably  neither  more  nor  less 
vulnerable  to  blast  than  other  pipe  stills  or  units  with  fractionating  towers 
such  as  light  ends  recovery  units.  The  dewaxing  plant,  however,  would 
be  invulnerable  unless  the  walls  of  the  building  came  in  onto  the  filters  — 
then  nearly  total  destruction  would  result. 


The  blending  of  motor  fuels  at  the  Whiting  refinery  is  accomplished 
by  an  in-line  blending  system,  automatically  controlled  by  computer.  This 
eliminates  the  need  for  blending  tanks  as  employed  at  Baton  Rouge  and  other 
refineries.  The  formula  is  programmed  into  one  of  three  computer-controlled 
blending  units.  Valve  or  flow  controls  are  pneumatic  or  electro-pneumatic. 
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The  blend  components  are  drawn  from  pipelines  or  storage  tanks  into  a 
common  pipeline,  where  the  actual  mixing  takes  place,  tht?n  into  product 
pipelines  or  other  storage  tanks.  The  accuracy  end  rapidity  of  this  system, 
together  with  the  reduced  storage  capacity  required,  are  its  principal  ad¬ 
vantages. 

The  blending  plant  is  located  in  the  south  tank  field,  next  to  a  rail 
siding  where  the  tetraethyl  lead  tanks  are  parked.  The  controlhouse  is 
typical  of  others  at  the  refinery  and  houses  the  computer  and  controls. 

As  in  the  case  of  the  crude  pumping  station,  loss  of  this  control- 
house  would  shut  off  the  flow  of  refined  products  to  markets  while  some 
other  means  of  blending  was  being  devised.  This  would  not  be  a  serious 
problem  however,  because  some  batch  blending  tanks  are  available,  and 
all  blending  could  be  done  by  batch  if  required. 

Controls 

Processing  unit  controls  are  electric,  electro-pneumatic  or  pneumatic, 
with  the  last  predominating,  but  the  trend  is  toward  electronic  miniaturized 
components,  Automatic  process  control  used  on  the  large  No.  12  pipe  still, 
No.  3  Ultraformer  and  the  in-line  blending  unit  has  been  working  out  very 
satisfactorily. 

Controlhouse  roofs  will  collapse  at  low  blast  overpressures  from 
1,0  -  1.5  psi,  which  would  not  cause  serious  damage  to  rugged  processing 
equipment.  In  this  low  range  of  blast  damage,  then,  the  damage  would  be 
primarily  confined  to  instruments  and  controls  located  in  the  controlhouse. 

The  repair  or  replacement  of  flow,  temperature  and  pressure  controls 
would  be  essential  for  startup  of  the  unit.  Further  discussion  of  control- 
house  vulnerability  will  be  found  in  section  3.  7.  2.  1. 

In  general,  instruments  have  much  less  lead  time  in  procurement 
than  other  items  of  process  equipment,  and  there  is  a  fairly  good  chance  of 
interchangeability.  Recorders  are  the  most  easily  interchanged,  and  proba¬ 
bly  the  major  repair  effort  would  be  devoted  to  replacement  of  wiring  and 
•  air  lines;  and  calibration  and  system  readjustment.  Following  attack,  re- 

’  turn  to  computerized  control  would  probably  be  delayed  long  after  startup. 

Instrumervc  air  is  obtained  from  plant  air  which  is  dehydrated  at  the 
process  units.  Emergency  air  compressors,  steam  driven,  are  located  at 
each  unit,  and  work  through  the  same  dehydrating  system. 

A.  2.3  Utilities 
Steam  and  electricity 

The  Whiting  refinery  generates  its  own  steam  and  electricity  in  two 
power  stations,  located  next  to  each  other  and  tied  in  so  that  they  are  es¬ 
sentially  operated  as  one.  There  is  no  tie-in  with  public  power,  but  this 
could  be  arranged  under  emergency  conditions  by  providing  circuit  breakers 
and  transformers. 

The  No.  1  power  station,  built  in  1928,  has  seven  boilers,  each  with 
a  capacity  of  160,000  lbs/hr.  of  400  psi  steam.  This  operates  four  5000  KW 
turbogenerators  which  exhaust  into  the  100  psi  steam  system. 
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The  No.  3  power  station,  built  in  1947,  has  five  suspended  boilers, 
each  with  a  capacity  of  335,000  Ibs/hr.  of  1500  psi  steam.  This  drives 
four  10,000  KW  turbogenerators  which  exhaust  into  the  400  psi  steam 
system.  The  suspended  boilers  are  supported  at  the  top  from  the  main 
building  frame.  The  boilers  in  both  stations  are  either  oil  or  gas  fired, 
depending  on  the  availability  of  fuels. 

There  are  also  three  1000  KW  turbogenerators  in  the  old  power 
station  operating  on  100  psi  steam. 

There  arc  waste  heat  recovery  boilers  on  No.  12  pipe  still  and  No.  3 
Ultraformer  with  a  combined  capacity  of  130,000  lbs/hr.,  and  one  in  operation 
on  Fluid  Catalytic  Cracking  Unit  FCU  500,  with  350,000  lbs /hr.  of  400  psi 
steam.  These  waste  heat  recovery  units  primarily  supply  steam  to  their 
respective  process  units. 

With  the  refinery  completely  dependent  on  these  two  power  stations, 
a  high  degree  of  flexibility  is  required  and  has  been  provided.  The  system 
is  schematically  diagrammed  in  Figure  A. 10. 

Outdoor  substations  at  each  refining  unit  are  served  by  a  system  of 
two  underground  feeders  each,  which  take  different  routes  from  the  power 
station  to  the  substation.  Here  the  voltage  is  stepped  down  from  13,600  V. 
to  2,300  and  4,000  V. 

A  quick  shutdown  of  the  power  stations  would  create  problems  for 
the  boilers  and  turbogenerators.  The  boiler  tubes  must  be  cooled  slowly, 
otherwise  a  too- rapid  cooling  rate  will  split  the  tubes  at  the  bends  from 
uneven  thermal  contraction,  requiring  replacement  of  tubes  in  order  to 
resume  operation.  Using  water,  1-1/2  days  are  normally  required  to  cool 
the  turbogenerators  properly.  For  a  more  thorough  discussion  of  shutdown 
of  an  electrical  facility,  refer  to  our  Electric  report. 

For  restarting  the  powerhouse  after  shutdown,  portable  diesel  units 
would  have  to  be  brought  in  to  provide  a  source  of  power  for  starting  the 
first  boiler.  After  that,  each  boiler  could  be  started  up  in  turn. 

Compressed  air 

Air  is  compressed  for  the  refinery  at  the  central  air  compressor 
plant,  where  a  group  of  piston  type,  two-stage  compressors,  driven  by 
synchronous  motors,  maintain  the  compressed  air  at  90-100  psi.  Instrument 
air  is  taken  from  this  system  and  dehydrated  at  the  process  units,  each  of 
which  is  also  equipped  with  standby  steam  driven  air  compressors  for 
emergency  use. 

Water 


Lake  water  is  pumped  from  two  pumping  s  itions,  located  side  by 
side  on  the  lakefront,  for  the  refinery  and  for  the  city  of  Whiting.  The  No,  1 
pump  station  has  five  centrifugal  rumps,  the  No,  2  has  four,  driven  by  2,300  V. 
synchronous  motors  with  standby  100  psi  steam  turbine  drives  on  the  same 
shaft  coupled  by  mechanical  clutches.  The  switchover  to  steam  is  completely 
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automatic.  In  a  test  of  the  automatic  system,  no  noticeable  pressure  drop 
occurred  during  the  switchover. 


Cooling  towers 

Cooling  tower  water  at  Whiting  is  supplied  to  all  process  units  from 
two  centrally  located  groups  of  cooling  towers,  between  the  catalytic  crack¬ 
ing  units  and  the  No.  12  pipe  stilL  The  vapor  recovery  units,  TJltraformers, 
and  No.  2  alkylation  unit  are  not  far  away.  This  arrangement  contrasts  with 
that  at  Humble's  Baton  Rouge  refinery,  where  each  nrocess  unit  has  its  own 
cooling  tower.  Although  11O  doubt  justifiable  in  terms  of  operating  require¬ 
ments  at  Whiting,  this  tower  centralization  could  lead  to  problems  in  greater 
vulnerability  and  postattack  repair. 


A,  3  Pascagoula  Refinery:  Introduction 

The  Pascagoula  refinery,  built  in  1963,  is  one  of  the  newest  in  the  United 
States  and  exemplifies  the  modern  refinery,  It  is  located  near  the  source 
of  crude  oil.  Construction  was  completed  in  just  over  two  years  from 
start  of  design  to  the  first  units'  going  on  stream,  probably  a  record  for 
construction  of  a  major  refinery.  Labor  requirements  were  13,900  man- 
months  of  on-plot  labor,  and  14,800  man-months  off-plot. 

Of  the  main  processing  units,  the  Fluor  Corporation  designed  and 
built  the  hydrocracker,  the  crude  unit,  hydrogen  plant,  and  catalytic  reform¬ 
ing  plant.  Bechtel  Corporation  built  the  fluid  catalytic  cracking  plant,  and 
Chicago  Bridge  &  Iron  Company  built  the  tank  farm.  The  alkylation  unit 
was  designed  and  constructed  by  Standard  Oil  Company. 

Drawings  of  all  equipment,  structures  and  foundations  at  the  refinery 
are  stored  in  three  places:  1)  originals  at  the  refinery,  on  the  first  floor 
of  the  administration  building  (where  they  could  easily  be  damaged  in  a 
flood),  2)  one  set  of  prints  at  the  company  headquarters  in  San  Francisco, 

3)  one  set  of  prints  at  the  contracting  engineer's  office,  primarily  Fluor, 
in  Los  Angeles,  or  Bechtel,  in  San  Francisco. 

A.  3.1  Operation  and  flow 

The  principal  refinery  process  units  are  a  100,000  B/D  two- 
stage  crude  unit,  a  42,200  B/D  FCC  unit,  a  17  MMcf  hydrogen  plant, 
a  16,805  B/D  hydrodenitrogenation  plant,  a  17,600  B/D  two-stage  iso¬ 
cracker,  a  28,800  B/D  cat  reformer  with  a  15,750  B/D  pretreat  section, 
a  5,500  B/D  H2SO4  alkylation  plant,  light  ends  recovery  plants,  and  an 
acid,  caustic  treating  plant.  There  are  no  lube  or  petrochemical 
operations.  The  refinery  produces  its  own  steam  in  three  Wickes 
water  tube  boilers,  each  rated  at  175,000  lb/hr.  of  600  psig  steam. 

This  refinery  reflects  the  latest  trends  in  design  and  technology. 
There  are,  however,  few  radical  departures,  with  the  exception  of  the 
isocracker,  which  reflects  a  current  trend  toward  this  particular  pro¬ 
cess.  The  isocracker  is  a  fixed  bed  catalytic  cracking  process  which 
has  as  its  principal  advantage  unusual  flexibility  of  operation.  It  is 
possible  to  operate  it  for  maximum  yield  of  gasoline,  or  for  maximum 
yield  of  heating  oils  of  jet  fuel,  without  changing  the  feedstock.  Thus, 
variations  in  market  demand  from  summer  to  winter  are  easily  accomo¬ 
dated,  and  the  value  of  this  flexibility  under  conditions  of  postattack 
recovery  is  apparent.  Also,  unlike  many  other  new  plants,  the  Pascagoula 
refinery  has  considerable  flexibility  in  its  overall  rate  of  throughput. 

In  this  respect,  the  hydrogen  plant  and  the  isocracker  are  the  least 
flexible  units,  but  the  overall  refinery  crude  refining  rate  can  be  varied 
from  50,000  B/D  to  131,000  B/D.  Individual  processing  units  can  be 
shut  down  without  shutting  down  the  entire  refinery  because  storage 
between  units  is  available. 
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The  refinery  employs  350-400  people,  of  which  1/3  are- 
operators,  1/3  are  for  maintenance,  and  1/3  are  office,  laboratory, 
and  engineering  personnel,  and  the  operating  force  per  shift  is  30-35 
peopl  e , 


The  refinery  uses  a  sweet  crude,  low  in  sulfur  content, 
brought  in  by  a  20!l  pipeline  from  the  Louisiana  delta,  143  miles 
away,  104  miles  of  which  is  laid  under  water  on  the  floor  of  the 
Gulf  of  Mexico,  The  pipeline  is  operated  by  Cal-Ky  Pipeline 
Company,  a  Kyso  affiliate,  and  has  a  capacity  of  140,000  B/U,  It 
is  designed  to  be  heavier  than  water  when  full  of  crude.  Crude 
storage  capacity  at  the  refinery  is  1.5  million  barrels,  approxi¬ 
mately  a  15-day  supply. 

Thirty  per  cent  of  refined  products  are  transported  by  pipe¬ 
line  115  miles  to  Collins,  Mississippi,  where  they  join  the  Plantation 
Pipeline  Company  system  for  distribution  to  Kyso's  five-state  market¬ 
ing  area.  The  remaining  seventy  per  cent  of  products  are  shipped  to 
local  markets  via  tank  car  and  tank  truck,  and  by  tanker  to  more 
distant  markets.  The  marine  terminal  on  the  Gulf  of  Mexico  can 
handle  tankers  up  to  32,000  dead  weight  tons  in  its  channel,  which  Is  , 
38  feet  deep  at  low  tide. 

Located  on  the  Gulf  of  Mexico,  the  plant  layout  reflects  the 
logic  and  functionalism  of  a  refinery  which  is  built  entirely  from  one 
master  plan  rather  than  built  up  piecemeal  over  the  years.  The 
processing  units  and  the  administration  building  are  grouped  together 
in  the  southern  part  of  the  plot,  nearest  the  Gulf,  The  tank  farms 
are  located  in  the  northern  part  of  the  plot  and  are  separated  from 
the  processing  areas  by  a  roadway.  Two-thirds  of  the  tanks  are  the 
floating  roof  variety,  and  the  remainder  have  cone  roofs.  All  were 
constructed  by  Chicago  Bridge  &  Iron  Company.  Propane  tanks  and 
butane  storage  spheres  are  located  along  the  northern  boundary  of  the 
plot  to  minimize  the  fire  danger.  Gasoline,  crude,  and  other  volatile 
liquids  are  generally  stored  in  floating  roof  tanks.  They  are  located 
in  groups  of  about  10  in  depressed  areas  between  elevated  roadways. 

The  tanks  are  not  individually  diked,  and  the  depression  is  large 
enough  to  contain  the  contents  of  only  one  full  tank,  in  the  event  of 
spillage.  In  the  event  of  blast,  tank  leakage  would  probably  not  be 
limited  to  one  tank  in  each  depression,  and  spillage  into  butane  and 
propane  storage  areas,  or  processing  areas,  with  subsequent  ignition 
would  be  a  probability. 

Firefighting  equipment  consists  of  one  mechanical  foam  truck 
and  portable  foam  extinguishers  and  foam  towers.  Hydrants  are  not 
numerous,  and  there  are  no  foam  chambers  on  tanks. 

Ground  water  level  is  only  6  to  9  feet  below  road  level.  The 
softness  of  the  soil  had  dictated  friction  piles  and  foundations  for  the 
process  units,  but  the  tankage  has  been  built  on  the  soft  soil  with  berms 
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of  sand.  Future  settling  of  2  to  4  feet  is  allowed  for  in  the  design 
by  providing  a  slope  in  the  tank  bottoms  of  1  inch  in  3  feet  downward 
from  the  center.  As  the  tank  settles  (and  some  50%  of  this  has  already 
occurred)  it  is  expected  that  the  tank  bottoms  will  gradually  flatten  out, 

The  Pascagoula  refinery  uses  in-line  blending,  and  the  system 
is  perhaps  the  most  highly  automated  in  the  industry.  It  is  similar  to 
the  in-line  blending  system  at  the  company's  Richmond,  California  re¬ 
finery,  hut  has  several  additional  features  which  principally  provide 
greater  flexibility.  Three  automatic  blenders  are  us.ed.  A  16-component 
5700  bbl/hr  gasoline  blender  makes  motor  and  aviation  gasolines.  An 
8-component,  4,000  barrcl/hr  midbarrel  unit  blends  diesel  oils,  kero- 
sines,  and  kerosine  and  gasoline-type  jet  fuels.  The  residual  fuel  blender 
is  a  3-component,  3500  barrel/hr  unit.  Loss  of  the  in-line  blending 
system  would  be  very  serious,  but  some  batch  blending  of  the  products  in 
storage  tanks  could  be  done. 

The  control  center  for  the  in-line  blending  system  also  acts  as  a 
control  center  for  all  of  the  refinery  systems  except  processing  units. 
These  are:  automatic  tank  gauging,  flow  recording  and  tank  switching  on 
incoming  crude  oil  through  the  Cal-Ky  pipeline,  remote  operation  of  the 
pumping  station  for  products  going  out  via  pipeline,  automatic  control  of 
products  going  out  to  the  wharf,  automatic  monitoring  of  the  tank -truck 
loading- rack  Keystop  system,  remote  control  of  treating  facilities  for 
slop  oil,  and  remote  control  of  feed  stocks  for  the  various  process  units. 
The  controlhouse  is  also  designed  to  be  used  as  a  communication  and  fire 
alarm  center  for  emergencies. 

TEL  and  TML  are  brought  in  by  rail  or  tank  truck  and  stored  in 
outdoor  weigh  tanks. 

A,  3. 2  Utilities 

Gas  is  brought  in  by  pipeline  from  offshore,  but  the  refinery  can 
operate  without  it  by  using  refinery  gas.  In  fact,  this  was  done  when  the 
refinery  was  first  started  up  before  the  gas  line  was  operating. 

All  cooling  water  is  processed  in  one  centrally-located  crossflow 
cooling  tower,  the  largest  in  the  United  States,  erected  as  a  package  by 
Marley,  325  feet  long,  91  feet  wide,  and  72  feet  high.  It  is  rated  for 
1220  millior  *v'\  ■  at  a  74,000  gpm  water  circulation  rate  and  has  9 
cells,  each  *  .  8 -foot  diameter  125  hp  fan.  Loss  of  this  cooling  tower 

would  certain  %  ..-an  plant  shutdown.  It  is  relatively  vulnerable  to  blast 

because  of  its  '  <.rge  drag  area  and  the  fact  that  the  internal  baffles  over 
which  the  water  falls  are  not  part  of  the  main  supporting  structure,  and 
therefore,  are  probably  not  very  securely  anchored.  If  these  internal 
baffles  were  blown  out,  but  the  cooling  fans  were  still  able  tc  operate,  it 
might  still  be  possible  to  cool  some  water  in  tie  tower,  although  certainly 
not  as  efficiently  or  in  the  quantity  for  which  it  was  designed. 
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The  extensive  use  of  air-cooled  heat  exchangers  at  process 
units,  although  not  handling  the  bulk  of  the  cooling  load,  still  represents 
a  large  portion  and  as  such  is  a  significant  innovation.  These  are 
mounted  over,  or  straddling,  pipeways  on  relatively  lightweight  structural 
steel  frames.  The  liquid  to  be  cooled  is  piped  through  a  series  of  finned 
tubes  and  fans  draw  the  cooling  air  through  them.  The  entire  assembly, 
mounted  fairly  high  up  in  the  unit,  is  enclosed  in  rectangular  sheet  metal 
boxes,  and  presents  a  high  drag  profile  which  would  cause  failure  at  rela¬ 
tively  low  overpressures. 

Electric  power  is  supplied  from  outside  the  refinery  by  Mississippi 
Power  Company,  backed  up  by  the  Southern  Electric  System.  A  50- minute 
power  outage  was  experienced  recently  at  the  refinery,  requiring  emergency 
measures  to  cut  feeds  and  furnace  flames  at  process  units.  Most  instru¬ 
mentation  is  air-operated,  and  steam  was  not  lost,  being  generated  in  the 
refinery's  own  boiler  plant,  so  that  losses  from  the  power  outage  were 
relatively  minor.  Loss  of  the  steam  plant  would  shut  down  the  refinery. 
Because  of  its  fluid  catalyst  the  FCC  unit  is  the  most  difficult  to  shut  down 
in  an  emergency,  and  it  is  equipped  with  enough  steam  turbine  diives  to 
operate  without  electric  power.  The  other  process  units  are  equipped  with 
only  enough  steam  drives  to  assure  an  orderly  shutdown,  which  normally 
takes  12-18  hours. 

Fresh  water  is  supplied  to  the  refinery  from  the  Pascagoula  River 
by  the  Jackson  County  Industrial  Water  System.  The  refinery  uses  about 
7  million  gallons  of  fresh  water  daily,  but  the  water  system  has  been  de¬ 
signed  to  accomodate  future  expansion  in  the  industrial  area,  so  that  it  can 
ultimately  supply  25  million  gallons  per  day. 

The  steam,  plant,  built  by  Combustion  Engineering  of  New  York, 
has  three  Wickes  water- tube  boilers,  with  sheet  metal  covers  and  an  air 
space  between  this  cover  and  the  firebricks,  each  capable  of  producing 
175,000  lb/hr  of  600  psig  steam.  The  1800  gpm  water  treating  plant,  the 
fuel  oil  treating  plant,  and  the  air  compressor  plant  are  located  adjacent 
to  the  steam  plant.  Controls  are  primarily  pneumatic,  as  in  the  refinery 
overall,  thus  assuring  continued  operation  of  the  steam  plant  and  the  air 
plant  with  its  steam  drives,  in  the  event  of  electric  power  failure. 

A.  3. 3  Emergency  repairs  and  procedures 

As  previously  mentioned,  a  50-minute  power  failure  has  already 
occurred,  but  loss  was  minor  because  steam  and  air  supply  were  not 
affected  and  all  units  are  equipped  with  sufficient  steam  drives  to  assure 
orderly  shutdown. 

There  is  a  unique  system  for  relieving  key  personnel  of  the  anxiety 
of  the  welfare  of  their  families  if  they  are  required  to  remain  at  the  plant 
during  a  disaster,  such  as  a  hurricane  or  flood.  This  is  the  so-called 
"buddy"  system,  where  a  key  man  on  one  shift  is  paired  with  a  non-key  man 
on  a  different  shift,  whose  responsibility  it  is  to  look  after  the  key  man's 
family,  as  well  as  his  own,  in  an  emergency,  while  the  key  man  is  on  duty. 
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Manual  control  of  all  processing  units,  except  the  isocracker, 
is  possible,  if  there  are  sufficient  numbers  of  additional  personnel.  It 
is  not  desirable,  however,  because  it  is  hazardous  and  quality  of  product 
would  suffer.  A  situation  could  develop  where  manual  operation  of  a  unit 
would  be  attempted,  because  controlhouses  and  their  instruments  are  rela¬ 
tively  vulnerable  at  low  overpressures .  After  a  blast  of  one  or  two  psi, 
therefore,  it  might  be  feasible  to  operate  a  pipe  still  manually  while  the 
controlhouse  is  being  repaired. 

It  would  be  possible  to  operate  the  refinery  with  a  crew  from  out¬ 
side,  or  from  elsewhere  in  the  company,  provided  there  was  a  nucleus  of 
about  20 'To  of  operating  personnel  familiar  with  this  refinery  and  they  could 
be  put  on  an  overtime  schedule.  Since  the  isocracker  is  the  only  such  unit 
in  the  company,  there  would  he  greater  difficulty  in  trying  to  operate  it 
with  a  crew  unaccustomed  to  its  operation. 

In  the  way  of  shortcuts  for  emergency  operation,  a  cat  cracker 
fractionator  can  be  run  as  a  primitive  form  of  crude  still,  and  if  the  de¬ 
mand  for  jet  fuel  is  suddenly  increased  the  crude  still  can  be  operated  to 
produce  JP-4  directly  and  in  maximum  quantity. 

Damaged  storage  tanks,  provided  they  do  not  leak,  can  be  used 
for  diesel  fuel,  crude,  or  kerosine.  Some  emergency  covering  would 
have  to  be  provided,  however,  to  prevent  escape  of  hazardous  vapors. 
Anything  that  floats  on  the  surface  would  serve,  such  as  wooden  boards, 
plywood,  plastic  sheets,  honeycomb  panels,  if  they  are  not  dissolved  by 
the  liquid  hydrocarbons.  There  is  considerable  danger,  however,  of 
ignition  of  vapors  by  lightning  if  the  tank  is  left  uncovered. 

Facilities  within  the  company,  but  at  different  locations,  can  be 
combined  easily  by  moving  feed  stocks  and  partly  processed  products 
from  one  refinery  to  another  by  tanker,  truck  or  rail.  A  little  of  this 
is  done  now,  and  much  more  could  be  done  in  an  emergency.  Outside 
the  company,  the  main  problem  would  be  one  of  communication,  to  find 
out  where  a  particular  feed  stock  is  needed,  or  is  available,  as  the  case 
may  be. 


The  design  of  the  Pascagoula  refinery  is  quite  foolproof;  this  is 
an  asset  because,  in  case  of  trouble,  there  is  no  readily  available  local 
supply  of  skilled  technical  people  for  repair  and  troubleshooting. 

There  are  several  aspects  that  seem  indicative  of  future  trends. 
There  is  increased  use  of  automation,  and  the  in-line  blending  system  is 
the  most  highly  automated  in  the  industry.  Larger  units  of  equipment 
are  used,  making  possible  savings  in  operating  personnel,  since  it  takes 
the  same  number  of  people  to  run  a  large  unit  as  a  small  unit.  Vapor 
recovery  units  —  absorbing  towers,  depropanizers,  debutanizers,  etc. — 
are  combined  with  the  cat  cracker,  cat  reformer  and  hydrocracker  units, 
and  run  from  the  same  controlhouses,  instead  of  being  set  up  as  a  separate 
plant. 
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There  is  also  sharing  of  controlhouses :  the  crude  still  and 
the  treating  plant  share  one  control  ho  use,  the  FCC  and  alkylation  uni's 
share  a  second,  and  the  isocracker,  hydrogen  plant,  and  cat  reformer 
share  a  third.  The  steam  plant  has  its  own  controlhouse.  This  sharing 
of  controlhouses,  although  not  too  widespread  for  large  refineries,  is 
common  among  small  ones. 

The  two-stage  compressor  handles  the  entire  load  for  recovery 
of  light  ends  from  cat  crarkcr  output,  where  in  older  plants  several  are 
required.  Also,  there  is  only  one  air  blower  on  the  cat  cracker. 

Pneumatically  operated  instrument  lines  use  primarily  flexible 
plastic  tubing  instead  of  metal  tubing. 

There  is  a  ready  supply  of  steel  plate  and  fabricating  facilities 
at  the  Pascagoula  shipyard,  six  miles  away.  Employing  about  5,000 
people,  this  yard  has  extensive  machining  and  fabricating  facilities  for 
heavy  vessels  which  could  be  used  in  an  emergency  for  repair  of  the 
Pascagoula  refinery,  if  so  allocated,  and  could  also  possibly  provide 
extra  labor. 

Hearings  and  standard  machine  components  are  available  locally 
and  probably  would  not  be  a  large  problem.  Piping  is  also  available  at 
a  local  piping  warehouse. 

Spare  turbine  rotors  are  kept  in  stock,  either  at  Pascagoula  or 
somewhere  else  within  the  company,  because  of  the  long  lead  times  in¬ 
volved  in  replacement.  There  are  very  few  other  spare  parts  stocked 
at  the  refinei'y. 

The  company  headquarters  in  San  Francisco  keeps  an  accurate 
inventory  of  spare  and  idle  equipment  in  the  company,  and  orders  for 
new  components  are  always  screened  against  this  inventory.  In  the 
postattack  environment,  it  would  be  helpful  to  have  such  an  inventory 
for  the  entire  industry,  because  problems  of  communications  in  locating 
spares  and  idle  equipment  outside  one’s  own  company  would  be  quite  a 
problem. 


H9SO4  for  the  alkylation  unit  is  brought  in  by  barge  from  DuPont, 
near  Houston.  The  spent  acid  is  normally  returned  to  the  manufacturer 
for  reclaiming,  and  this  reclaiming  might  become  a  problem. 


The  fixed  bed  catalyst  for  the  isocracker  is  the  most  critical  in 
supply  among  the  catalysts  because  it  is  available  only  from  Universal  Oil 
Products  Corporation  and  Standard  Oil  Company.  Normally  one  complete 
charge  is  kept  in  storage  somewhere  in  the  company,  but  not  at  Pascagoula, 
because  the  catalyst  is  replaced  infrequently  and  can  be  scheduled  in  ad¬ 
vance.  Once  exposed  to  air  this  catalyst  is  spoiled,  and  like  other  catalysts, 
it  must  be  regenerated  by  the  manufacturer,  UOP  or  Standard  Oil  Company. 
Fluid  catalyst  is  not  stockpiled  either,  but  it  is  available  from  a  number  of 
sources.  Hydrogen  plant  catalyst  is  available  from  Filtrol,  Girdler,  or 
other  companies,  and  there  are  at  least  six  sources  for  cat  reformer  catalysts. 


A-31 


Routine  maintenance  and  instrument  installation  and  repair  is 
handled  by  refinery  maintenance  personnel,  but  construction,  welding, 
and  pipefitting  is  done  by  contractors,  so  that  the  permanent  refinery 
work  force  can  be  kept  at  a  minimum.  Pipefitters  and  welders  are  the 
most  -  ritical  labor  skills,  almost  always  in  tight  supply. 

Construction  equipment  at  the  refinery  is  Sufficient  for  a  turn 
around  of  only  one  unit  at  a  time.  There  is  one  25-ton  crane  used  for 
pulling  exchanger  bundles,  one  50-ton  truck  crane,  one  15-ton  hydraulic 
crane,  one  10-ton  hydraulic  crane,  and  some  small  contractor’s  cranes, 
of  which  the  biggest  is  25  ton. 

The  refinery  has  a  well-equipped  repair  shop,  with  an  overhead 
15-ton  traveling  crane,  which  is  capable  of  a  wide  range  of  repair  work, 
and  is  limited  only  by  its  capacity  in  handling  the  large  pressure  vessels 
and  towers.  The  contractors  do  the  same  kind  of  work  as  the  refinery 
maintenance  force  but  have  greater  capacity. 

There  is  quite  a  lot  of  repair  work  that  can  be  done  on  a  unit 
after  startup,  but  it  would  have  to  be  done  without  using  an  open  flame. 
This  probably  rules  out  welding.  In  the  case  of  the  two- stage  crude  unit, 
the  atmospheric  section  could  be  repaired  first  and  put  into  operation  be¬ 
fore  starting  repair  on  the  vacuum  section. 
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A,  4  DuPont's  Chambers  Works  (TEL  Plant) 

A.  4,  1  Plant  and  equipment 

There  are  four  buildings  in  which  the  batch  process  is  used. 

Three  of  these  are  TEL  plants,  one  a  TML  plant.  Th**  four  buildings 
are  basically  identical,  being  five- story  steel  framed,  with  reinforced 
concrete  floors  and  brick  walls. 

In  the  batch  process,  the  lead  sodium  alloy  hoppers  are  brought 
to  the  fifth  floor  in  an  elevator  and  unloaded  through  a  pipe  connection 
into  one  of  the  16  autoclaves  which  are  located  on  the  fourth  floor.  Each 
autoclave  has  a  still  directly  below  it  so  that  the  top  of  the  still  is  on  the 
third  floor  and  the  bottom  of  the  still  is  on  the  second  floor.  When  the 
reaction  has  been  completed,  the  charge  is  dropped  from  the  autoclave 
into  the  still,  where  the  TEL  “oil"  is  stripped  by  steam  distillation. 

There  is  also  an  alloying  building,  and  a  three -story  continuous 
process  building  for  TEL  production.  These  are  of  a  similar  type  con¬ 
struction  to  the  four  batch  plant  buildings. 

The  blending  building  is  also  a  steel-framed  building  with  brick 
walls  and  no  intermediate  flooring,  because  the  TEL  tanks  extend  to  the 
full  height  of  the  building. 

The  mclthouse  is  a  steel-framed  building  with  corrugated  metal 
siding,  located  next  to  the  TEL  continuous  plant  with  a  molten  lead  pipe¬ 
line  in  between. 

Other  buildings  in  the  TKL-TML  group  are  the  sludge  pit,  with 
steel  frame  and  corrugated  metal  siding,  adjoined  by  the  lead  recovery 
building,  with  steel  frame  and  concrete  block.  Also  there  is  a  shop,  a 
shipping  and  receiving  building,  and  a  sodium  unloading  building  with  steel 
frame  and  glazed  block  walls,  where  two  sodium  tank  cars  at  a  time  can 
be  thawed  by  circulating  hot  oil  in  the  jackets,  and  unloaded. 

There  are  also  two  ethyl  chloride  fractionating  columns,  or  towers, 
pedestal-mounted  on  footings  with  piles.  One  of  these,  135  feet  high,  serves 
the  continuous  TEL  plant,  and  is  located  directly  to  the  north  of  it.  The 
other  one,  85  feet  high,  serves  the  four  batch  plants  and  is  located  about 
1000  feet  to  the  north. 

The  TEL  storage  tanks  are  welded  steel  tanks  with  cone  roofs, 
conforming  to  API  standard  650.  Of  the  16  tanks,  one  is  50  feet  in  diameter, 
and  the  others  are  30  or  35  feet  in  diameter.  They  are  individually  mounted 
on  reinforced  concrete  foundation  frames  and  individually  diked  in  a  depres¬ 
sion  capable  of  containing  the  contents  of  the  full  tank  plus  10%.  They  are 
laid  out  in  a  line  with  reinforced  concrete  firewalls  between  the  tanks. 

From  a  fire  protection  standpoint  this  is  a  very  good  arrangement. 
In  blast,  however,  the  failure  of  the  concrete  walls  could  create  debris  and 
secondary  missiles  capable  of  doing  extensive  da  nage  to  the  tanks. 


A -33 


A.  4.2  Utilities 


Steam  and  electricity  are  supplied  by  the  Atlantic  City  Electric. 
Company  power  station,  located  on  the  opposite  side  of  the  Salem  canal 
from  the  Chambers  Works.  There  are  five  boilers  serving  the  Chambers 
Works:  two,  coal  or  oil  fired,  producing  400,000  lb/hr  of  steam,  and 
three,  oil  fired,  producing  165,000  Ib/hr.  The  plant  uses  10,000  Ih/hr 
of  process  steam. 

The  same  power  station  supplies  38,000  KW  of  electric  power 
at  11,000  volts.  It  is  stepped  down  at  13  substations,  scattered  through¬ 
out  the  plant,  to  2300  volts,  550  volts,  and  110  volts.  Most  motors  and 
their  starters  run  on  55Q  volts,  rather  than  the  more  common  440  to  220, 
and  this  would  be  a  problem  in  replacement  o!  damaged  equipment. 

Water  pumps  are  also  located  at  the  power  station,  The  peak 
cooling  water  load  in  summer  is  35,000  gpm,  pumped  from  the  Delaware 
River. 

Portable  air  compressors  are  scattered  throughout  the  plant  and 
would  not  be  a  problem  under  emergency  operations. 
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A.  5  ADDITIVES  PLANTS  DESCRIPTIONS 


A.  5.  1  TEL  manufacture 

There  are  three  processes  commonly  in  use,  using  two  different 
reactions.  The  first  reaction  is  the  ethylation  of  sodium  lead  alloy,  as 
follows : 


4  NaPb  +  4  C2H5C1  (C2II5)4Pb+3Pb  +  4NaCl 

Two  processes  are  associated  with  this  reaction.  These  are:  1)  the  batch 
process, 2*3  by  which  the  first  TEL  was  manufactured  and  which  still  accounts 
for  the  bulk  of  production,  and  in  which  ethyl  chloride  is  reacted  with  lead 
sodium  alloy  in  autoclaves,  followed  by  steam  distillation;  2)  the  continuous 
process,  employing  the  same  reaction  between  ethyl  chloride  and  lead  sodium 
alloy,  but  on  a  continuous  throughput  basis.  A  different  reaction  is  used  in 
the  Nalco  electrolytic  process,  in  which  magnesium  chips  are  reacted  with 
ethyl  chloride  to  produce  magnesium  ethyl  chloride,  followed  by  a  continuous 
electrolysis  with  ether  solvent,  in  which  lead  pellets  are  the  anode  and  the 
vessel's  steel  walls  are  the  cathode.  The  tetraethyl  lead  forms  at  the  anode 
and  magnesium  chloride  forms  at  the  cathode.2"*  In  chemical  terms,  the 
reactions  are: 

<C9H,)  Cl  +  Mg  (C9H-)MgCl 

( 0I.G  ctrolysis ) 

2  (C2H5)  MgCl  +  2  (C2H5)  Cl  +  Pb  - >  (C2H5)4Pb  +  2  MgClg 

These  three  processes  are  the  only  ones  in  commercial  use  at  this  time. 

The  DuPont  continuous  process  is  about  ten  years  old,  and  is  com¬ 
mercially  feasible  only  in  large  quantity  throughput.  The  Nalco  process  has 
been  in  commercial  use  only  about  one  and  one-half  years,  and  accounts  for 
5  per  cent  of  the  U.  S,  production. 

TML  is  essentially  interchangeable  with  TEL.  It  is  made  by  the 
batch  process  only,  using  methyl  chloride  instead  of  ethyl  chloride.  The 
process  is  basically  the  same  as  the  TEL  batch  process,  with  a  few  differ¬ 
ences.  These  are  primarily  that  in  TML  production  higher  autoclave 
pressures  are  used  and  a  dry  graphite  lubricant  is  mixed  with  the  reactants 
to  prevent  paddle  binding  in  the  autoclave. 

With  a  moderate  amount  of  equipment  modification,  a  TML  batch 
plant  could  be  converted  to  a  TEL  batch  plant.  The  reverse  is  not  true, 
however,  because  of  the  greater  pressure  needed  for  TML. 


A-35 


The  six  basic  steps  in  TEL  manufacture  are,  1)  mixing  the  lead- 
sodium  alloy,  then  chilling  and  flaking  it  in  a  nitrogen  atmosphere,  2) 
ethylation  in  a  steam-jacketed,  agitated  autoclave,  in  which  the  lead  sodi¬ 
um  alloy  is  reacted  with  ethyl  chloride,  3)  steam  distillation,  which  sepa¬ 
rates  the  TEL  from  the  sludge,  4)  ethyl  chloride  recovery,  5)  recovery  of 
lead  from  the  sludge,  and  6)  blending  per  customer's  specifications. 

In  the  alloy  making,  the  pig  lead  is  melted  in  a  furnace  and  pumped 
to  the  alloy  pots  to  make  a  lead  sodium  alloy  containing  10  or  11%  sodium. 
The  alloy  is  then  chilled  and  made  into  flakes  in  a  flaking  machine.  The 
flakes  are  loaded  into  two-ton  hoppers,  still  in  a  nitrogen  atmosphere,  and 
taken  by  lift  truck  and  elevator  to  the  top  floor  of  the  ethylation  building. 

In  the  batch  process,  the  charges  of  alloy  are  loaded  into  the  auto¬ 
claves  from  above.  The  reaction  requires  1  1/2  to  2  hours,  and  then  the 
charge  is  dropped  out  through  the  bottom  of  the  autoclave  into  a  still  on  the 
floor  below,  where  the  TEL  "oil"  is  stripped  from  the  sludge.  The  sludge 
is  then  pumped  to  the  sludge  pit,  where  it  is  dried  for  lead  recovery  in  a 
furnace.  The  ethyl  chloride  recovery  is  accomplished  at  the  autoclave, 
where  the  overhead,  or  lightest  fraction,  is  drawn  off  and  sent  to  the 
fractionating  column  for  ethyl  chloride  purification.  After  distillation, 
the  TEL  is  washed,  blended  and  sent  to  storage. 

In  the  continuous  process,  the  alloy  is  prepared  the  same  way, 
but  the  rest  of  the  process  is  quite  different.  The  reaction  takes  only 
five  or  ten  minutes  at  a  higher  temperature  and  pressure  than  in  the  batch 
process.  For  this  reason  the  continuous  plant  can  be  shut  down  in  twenty 
minutes,  while  the  batch  plants  require  2  and  3/4  hours  to  shut  down  be¬ 
cause  the  batches  in  process  must  be  allowed  to  continue  through  the  auto¬ 
clave  and  still.  In  the  continuous  process,  there  are  normally  about  sixty 
shutdowns  per  month,  mostly  to  clean  out  and  check  the  equipment.  After 
cleanout  and  before  startup,  the  system  is  pressure  tested  with  ammonia 
gas,  but  both  cleanup  and  pressure  test  could  be  omitted  in  an  emergency. 

In  general  it  requires  more  maintenance  and  engineering  than  the  batch 
process  plant,  and  the  volume  of  production  is  less  flexible. 

A.  5.  2  Principal  materials 

The  principal  materials  are  lead,  sodium,  ethyl  chloride,  and  in 
the  case  of  TML,  methyl  chloride.  Lead  is  obtained  by  rail  or  water,  40% 
from  domestic  sources,  60%  from  foreign  sources,  chiefly  Mexico.  Sodium 
is  brought  in  by  rail  in  jacketed  tank  cars,  and  is  then  thawed  and  pumped 
out.  Melting  point  is  97.5°C.  Ethyl  chloride  is  either  purchased  and 
brought  in  by  pipeline.  Methyl  chloride  is  100%  purchased. 
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Other  materials  used,  all  in  small  quantities,  are  the  catalysts 
and  inert  gases.  The  catalysts  include  aluminum  chloride,  and  aceton. 
Substitutes  are  available.  The  nitrogen,  used  as  an  inert  gas,  is 
normally  supplied  by  pipeline  but  in  an  emergency  tank  trailers  are  used. 
In  TML  manufacture,  the  dry  powdered  graphite  lubricant  is  of  an  im¬ 
ported,  specially  fine,  very  dry  grade.  This  could  be  obtained  from 
domestic  sources,  but  more  per  charge  would  be  required  because  of 
the  difference  in  quality,  TEL  is  extremely  toxic,  whether  ingested, 
inhaled,  or  in  contact  with  the  skin.  An  elaborate  ventilation  system 
is  used  in  all  buildings  where  it  is  handled,  so  that  the  air  is  changed 
approximately  every  five  minutes.  Shafts,  shaft  seals  and  joints  on 
vessels  that  might  produce  leaks  are  hooded  and  vented  to  the  exhaust 
system.  Personnel  who  work  in  the  buildings  are  given  regular  checks 
to  monitor  any  buildup  of  lead  in  the  system.  Because  the  hazard  is 
recognized  and  is  being  dealt  with  effectively,  an  excellent  safety  record 
has  been  established. 

A.  5.  3  Emergency  operation 

Under  emergency  operating  conditions,  there  are  several  things 
that  could  be  done  to  simplify  operations.  Since  the  continuous  plant  is 
more  highly  automated  than  the  natch  plants,  and  less  flexible,  it  would 
be  logical  to  repair  the  batch  plants  first  if  both  are  damaged.  The 
batch  plants  can  be  run  without  instruments,  using  extra  manpower  if 
available,  but  the  continuous  plant  cannot  be  run  manually  because  of 
the  increased  hazard.  Expansion  of  the  batch  plants  can  be  done  easily 
by  adding  more  autoclaves,  but  expansion  of  a  continuous  plant  is 
difficult,  if  not  impossible.  For  this  reason,  new  plants  are  generally 
designed  for  batch  operation. 

If  the  ethyl  chloride  fractionating  columns  are  damaged,  but 
ethyl  chloride  is  in  ample  supply,  the  ethyl  chloride  recovery  system 
would  be  eliminated  and  ethyl  chloride  vented  from  the  autoclaves  to 
the  outdoors. 
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GLOSSARY 


ai~  agitation:  a  supplementary  method  of  fighting  fires  in  petroleum  products 
or  crude  oil  storage  tanks  whereby  air  is  pumped  into  the  tank  in 
order  to  mix  and  cool  the  hot  surface  layer  or  reduce  the  intensity 
of  the  fire  by  creating  an  excessive  proportion  of  air. 

alkylation  (unit):  the  process  unit  in  which  the  alkylation  process  is  used  for 
the  production  of  alkylate  used  in  high  octane  gasoline.  The  reaction 
is  the  union  of  an  olefin  and  isobutane,  a  branched  chain  paraffin,  to 
form  a  more  highly  branched  paraffinic  hydrocarbon. 

amylene:  a  petroleum  hydrocarbon  of  the  olefin  series,  formula  C^Hjq,  used 
in  the  alkylation  process,  known  also  as  pentene. 

API:  American  Petroleum  Institute. 

asphalt:  black  to  dark  brown  solid  or  semisolid  cementitious  material  which 
gradually  liquefies  when  heated  and  in  which  the  predominating  con¬ 
stituents  are  bitumens. 

attendant  structure:  steel  structures,  stairways  and  platforms  adjacent  to 

or  surrounding  vertical  vessels  and  fractionating  columns  in  petroleum 
process  units,  to  provide  access  for  maintenance  or  observation,  and 
support  for  auxiliary  pieces  of  equipment  such  as  pumps,  piping,  and 
heat  exchangers. 

b/cd  barrels  per  calendar  day,  the  total  capacity  of  a  petroleum  process  unit 
over  a  period  of  time  divided  by  the  number  of  days  in  that  period, 
including  shutdown  time. 

b/d:  barrels  per  day.  One  barrel  equals  42  U.S.  standard  gallons 

blending:  the  mixing  together  of  various  streams  from  different  processes  to 
provide  a  final  product  with  the  necessary  characteristics  to  meet 
specific  market  specifications.  Almost  all  gasolines  marketed  are 
blended,  either  by  the  batch  process  or  by  in-line  blending. 

blow(ing):  in  petroleum  tank  fires,  the  sudden  explosion  or  eruption  of  the 
tanks  contents. 

blow  out:  the  uncontrolled  and  sudden  eruption  of  an  oil  well  under  pressure; 
a  potential  hazard  in  drilling  when  unexpected  high  pressure  areas 
may  be  penetrated  by  the  drill  bit. 

boiling  range:  in  distillation,  the  range  between  the  temperature  at  which 
boiling  commences,  called  the  initial  boiling  point  (I.  B.  P.  ),  and 
the  temperature  at  which  the  last  portion  of  liquid  evaporates,  called 
the  final  boiling  point  (F.  B.  P, ). 
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boil  over:  in  crude  oil  tank  fires,  a  violent  eruption  of  the  tank's  contents 
caused  by  sudden  flashing  to  steam  of  a  layer  of  water  in  the  tank 
bottom  on  contart  with  a  'heat  wave"  from  the  burning  oil. 

b/sd:  barrels  per  stream  day,  the  capacity  of  a  petroleum  process  unit 
while  the  unit  is  operating. 

bunker  “C"  fuel  oil:  a  heavy  residual  fuel  oil,  specified  as  ASTM  No.  fuel, 
with  a  maximum  viscosity  of  300  sec.  Furol  at  122°1'\ 

butane:  a  petroleum  hydrocarbon  of  the  paraffin  series,  formula  C^Hjg,  It 
can  be  either  normal  butane,  which  has  a  straight  chain  and  is  often 
blended  with  gasoline,  or  isobutane,  which  is  a  branched  chain  and  is 
alkylated.  Either  kind  of  butane  is  sometimes  blended  into  LPG. 

butyl:  the  organic  radical  having  the  formula  CHnfCH^fn-.  Used  in  synthetic 
rubber  manufacture. 

butylene:  a  petroleum  hydrocarbon  of  the  olefin  series,  formula  C^bL,  used 
primarily  in  the  alkylation  process,  also  called  butene. 

catalyst:  a  substance  which  affects,  provokes,  or  accelerates  chemical  re¬ 
actions  without  itself  being  altered, 

catalytic  reforming:  the  rearranging  of  hydrocarbon  molecules  in  a  gasoline¬ 
boiling-range  feed-stock  to  produce  other  hydrocarbons  having  a  higher 
antiknock  quality. 

closed  loop:  in  automatic  control  systems,  a  term  used  to  describe  a  system 
having  feedback  of  output  to  input  where  it  is  compared  to  a  reference 
for  automatic  adjustment  of  controlled  parameters  such  as  flow  rates, 
pressures,  etc. 

coking  (furnace):  in  a  crude  oil  furnace,  the  formation  of  coke  on  the  inside 
surfaces  of  hot  furnace  tubes  when  oil  flow  is  cut  off,  or  with  time. 

coking  (unit):  the  process  unit  used  for  the  production  of  coke,  a  solid  re¬ 
finery  or  commercial  fuel,  produced  by  the  delayed  coking  process, 
fluid  coking  process  or  a  batch  coking  process. 

cone  roof:  on  a  liquid  storage  tank,  the  cover  which  is  permanently  welded 
to  the  tank  walls  and  is  in  the  shape  of  a  cone;  convex  surface  facing 
outward. 

cracking:  a  process  in  which  the  complex  hydrocarbons  comprising  petroleum 
oils  are  broken  up  by  heat  and  usually  pressure  into  lighter  hydrocarbons 
of  simpler  molecular  formulas.  Catalytic  cracking,  which  has  generally 
replaced  thermal  cracking,  does  not  utilize  pressures  as  high  as  did  the 
older  thermal  cracking  process. 

crude  (oil):  unrefined  petroleum  as  it  comes  from  the  well,  or  at  any  stage 
prior  to  distillation. 
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cyclones:  in  the  fluid  catalytic  cracking  profess,  centrifugal  dust  separators 
which  arc  built  into  the  top  portions  of  both  reac  tor  and  regenerator  to 
separate  the  fine  particles  of  catalyst  from  gas  and  vapor  streams  in 
order  to  avoid  loss  of  catalyst  in  the  form  of  fine  dust. 

end  point:  in  a  laboratory  distillation  test,  the  maximum  temperature  re¬ 
quired  to  vaporize  the  last  liquid  portion  of  the  sample  is  recorded  as 
the  end  point  (E.  P.  ). 

ethylene:  a  petroleum  hydrocarbon  of  the  olefin  series,  formula  C0H4*  a  gas 
at  room  conditions.  Although  often  burned  with  hydrogen,  methane,  and 
ethane  as  refinery  fuel,  it  is  sometimes  produced  for  use  in  manufacturing 
petrochemicals. 

fail  safe:  a  term  used  to  describe  a  device  which  operates  automatically  in 
such  a  manner  as  to  provide  maximum  safely  in  the  event  of  a  failure 
or  malfunction  of  a  system.  In  the  petroleum  industry  it  refers  to  the 
operation  of  a  control  device,  on  failure,  to  reduce  temperature  and/or 
pressure. 

FCT,  FCCU:  abbreviations  for  fluid  catalytic  cracking  unit. 

flare  stacks:  in  a  petroleum  refinery,  tall  chimneys  with  a  pilot  light  at  the 
top  for  burning  excess  gases  and  vapors  which  cannot  otherwise  be  dis¬ 
posed  of. 

flare  (to  ):  in  a  petroleum  refinery,  to  burn  excess  quantities  of  gases  and 
vapors  in  tall  chimneys,  called  flare  stacks. 

floating  roof:  on  a  liquid  storage  tank,  the  cover  which  floats  on  the  surface 
of  the  stored  liquid  by  means  of  pontoons,  or  air  spaces,  in  the  roof. 
Used  to  reduce  loss  by  evaporation. 

foam:  an  even  suspension  of  carbon  dioxide  in  a  liquid,  in  which  the  small  gas 
cells  are  separated  from  each  other  by  thin  liquid  films.  Extinguishes 
fire  by  forming  an  air  excluding  blanket. 

fractionator:  a  vertical  steel  cylinder  divided  horizontally  into  a  number  of 
sections  by  means  of  plates  or  trays,  for  the  separation  of  the  con¬ 
stituents  of  a  mixture  through  differences  in  boiling  point. 

heat  exchanger:  a-i  apparatus  used  to  transfer  heat  from  one  fluid  to  another. 

hydrogen  treating:  a  hydrodesulfurization  process  using  a  catalyst  of  cobalt 
molybdenum  on  alumina. 

hydroreforming,  or  hydroforming:  a  process  in  which  naphthas  are  passed 
over  a  catalyst  at  elevated  temperatures  and  moderate  pressures,  in 
the  presence  of  hydrogen,  to  form  high-octane  motor  fuel, 

inhibitors:  an  agent  or  additive  that  slows  or  interferes  with  a  chemical  action. 

Inhibitors  are  added  to  gasoline  to  retard  the  formation  of  gum  in  storage. 
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ill- lint?  (blending  system*);  gasoline  blending  by  simultaneously  pumping 
all  Ihr-  components  into  a  common  discharge  pi)*-  or  header  at 
rates  of  flow  corresponding  to  the  required  portions  of  the  components 
in  tlie  blend. 

instrument  air:  a  supply  of  compressed  air  used  to  operate  control  instru¬ 
ments.  It  is  usually  maintained  at  lower  pressure  and  is  cleaner  and 
drier  than  the  regular  plant  compressed  air, 

isobutane:  a  petroleum  hydrocarbon  of  the  branched  chain  paraffin  serins, 

formula  C.H,„,  used  primarily  in  the  alkylation  process. 

*f  iu 

lead  susceptibility;  ability  of  gasolines  to  respond  to  the  addition  of  TEL,  or 
other  organome laLlic  lead  antiknock  compounds,  as  reflected  in  the  anti¬ 
knock  quality  per  increment  of  lead, 

light  ends;  either  a  single  hydrocarbon  nr  a  hydrocarbon  mixture  having  a 
Heid  vapor  pressure  of  18  psia  or  more.  Examples  are  methane, 
ethane,  propane,  butane,  and  pentane, 

LPG:  liquid  petroleum  gas —  hydrocarbon  gases,  either  extracted  from  natural 
gas  and  gasolines  or  a  refinery  product,  which  liquefy  under  pressure. 
Principally  propane  and  butane,  used  for  domestic  and  industrial  heating. 

lubes:  a  fluid  lubricant  used  to  reduce  friction  between  bearing  surfaces. 

Petroleum  lubricating  oils  may  be  produced  cither  from  distillates  or 
residues. 

manifold:  a  piping  arrangement  which  allows  one  stream  of  liquid  or  gas 
to  be  divided  into  two  or  more  streams,  or  which  allows  several 
streams  to  be  collected  into  one. 

MEK :  methylethyl  ketone,  a  solvent  used  in  dewaxing  of  lubricating 
oils. 

middle  distillate:  a  middle  range  boiling  point  petroleum  product  obtained 
between  kerosine  and  lubricating  oil  fractions  in  the  refining  process. 
Includes  light  fuel  oils  and  diesel  fuel. 

missile:  an  object  broken  off  or  picked  up  by  the  blast  and  hurled  at  high 

speed.  Capable  of  causing  considerable  damage  on  striking  equipment 
or  buildings. 

MON:  motor  octane  number,  a  method  of  testing  the  knock  characteristic 

of  gasoline  established  in  1948  and  designated  by  ASTM  as  F-2  or  D357. 
Conducted  at  900  rpm,  it  represents  high  speed  performance  on  the 
highway. 

Navy  Special:  a  r  'sidual  fuel  oil,  less  viscous  and  with  stricter  specifications 
than  bunker  "C"  fuel  oil. 
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olefin:  a  series  of  petroleum  hvdrnrarbnns,  with  type  formulae  C‘nll2n, 
composed  of  unsaturated  hydrocarbons,  with  names  ending  in  ..cne, 
such  as  ethylene,  propylene  and  butylene, 

nn  stream:  a  tern'  '.'trd  to  indicate  that  a  process  unit  or  piece  of  equip¬ 
ment  is  operating, 

overhead:  m  a  fractionating  column,  the  stream  being  drawn  off  from  the 
top  of  the  column.  The  lightest  of  the  products  of  fractionation. 

petrochemicals;  chemicals  manufactured  from  petroleum  hydrocarbons 
such  as  olefins, 

phenol;  the  chemical  name  for  carbolic  acid,  used  in  the  solvent  treat¬ 
ment  of  lubricating  oil,  for  removal  of  undesirable  aromatics. 

pipe  still:  a  continuous -fiow  crude  oil  distillation  unit.  Most  modern 
stills  have  two  stages:  atmospheric  and  vacuum, 

polymerization  (unit):  the  process  unit  in  which  the  polymerization  pro¬ 
cess  is  used  for  production  of  high  octane  gasoline  from  the  lighter, 
cracked  olefin  gases.  The  reaction  combines  a  number  of  small 
unsaturated  molecules  to  form  a  single  targe  molecule,  known  as  a 
poly  me  r. 

nowerformer  unit:  the  process  unit  in  which  the  powerforming  process 
is  used  for  production  of  high  octane  gasoline.  It  is  a  proprietary 
process  of  Esso  Research  &  Engineering  Company  and  is  a  fixed  bed 
cyclic  process  employing  a  platinum  catalyst. 

propane:  a  gaseous  petroleum  hydrocarbon  of  the  paraffin  series,  formula 
CgHjj,  used  primarily  as  LPG. 

propylene:  a  gaseous  petroleum  hydrocarbon  of  the  olefin  series,  formula 
Cgilg,  used  in  the  alkylation  process. 

Reid  vapor  pressure:  a  method  for  measuring  the  vapor  pressure  of  volatile 
fuels,  or  the  tendency  to  evaporate  and  form  vapor.  The  Reid  vapor 
pressure  determination  is  carried  out  on  gasolines  at  100°F  in  a 
special  apparatus. 

residual(s):  the  highest  boiling  point  fractions  in  distillation.  Residuals 
may  be  blended  into  residual  fuel  oil,  or  asphalts,  or  processed  on  a 
coking  unit. 

Richter  scale:  a  method  of  determining  the  intensity  of  earthquakes , 

The  Richter  values  of  earthquake  magnitude  constitute  a  measurement 
of  the  energy  released  by  the  disturbance  and  are  rated  on  a  logarithmic 
scale. 
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KON:  research  octane  number,  a  method  of  testing  the  knock  characteristic 
of  gasoline  established  in  1948  and  designated  by  ASTM  as  F-l  or 
D908,  Conducted  at  600  rpm,  it  represents  low  speed  performance 
during  city  driving. 

shut  in:  to  plug  or  shut  off  a  completed  oil  well  so  that  it  can  be  left  with 
contents  undisturbed  for  future  crude  oil  production. 

slop  over:  in  crude  oil  tank  fires,  a  sudden  eruption  of  the  contents  of  the 
tank  which  sorm-times  occurs  when  foam  is  applied. 

slop  tank:  a  tank  used  in  a  refinery  to  collect  off  test  stocks  or  wet  stocks 
for  reprocessing. 

smoke  point:  in  the  smoke  point  test  for  assessing  the  burning  characteristics 
of  kerosine  ami  jet  fuels,  the  maximum  flame  height  in  millimeters 
at  which  the  fuel  will  burn  without  smoking  when  tested  in  a  special 
wick-fed  lamp. 

sour  crude:  crude  oil  containing  0.05  cubic  feet  or  more  of  dissolved  hydrogen 
sulfide  per  100  gallons.  Such  oils  are  dangerously  toxic.  High  sulfur 
oils  do  not  necessarily  contain  hydrogen  sulfide,  and  consequently  not 
all  are  classified  as  sour. 

sweet  crude:  crude  oil  containing  leas  than  0.05  cubic  feet  of  dissolved 
hydrogen  sulfide  per  100  gallons, 

TEL:  abbreviation  for  tetraethyl  lead,  Pb{CH3>4,  an  additive  used  to  improve 
the  antiknock  characteristics  of  gasoline. 

thermal  cracking:  a  refining  process  which  decomposes,  rearranges,  or 
combines  hydrocarbon  molecules  by  the  application  of  heat,  without 
the  aid  of  a  catalyst. 

TM.L:  an  organic  compound  of  lead,  PbfCHg),},  which  when  added  in  small 
amounts,  increases  the  antiknock  quality  of  gasoline. 

transite:  a  cement-asbestos  compound,  that  can  be  formed  into  a  corrugated 
building  material. 

treating:  a  process  applied  *o  petroleum  and  its  refined  products  to  remove 
undesirable  impurities, 

tsunami:  a  giant  sea  wave  produced  by  water  displacement  due  to  a  nuclear 
weapon,  an  earthquake,  or  a  marine  volcanic  eruption. 

turnaround:  time  necessary  to  clean  and  make  repairs  on  refinery  equipment 
after  a  normal  run;  the  elapsed  time  between  shutting  a  unit  down  and 
putting  the  unit  on  stream  again. 

Ultraformer:  the  process  unit  in  which  the  ultraforming  process  is  used  for 

production  of  high  octane  gasoline.  A  proprietary  process  of  the  Standard 
Oil  Company  (Indiana),  Ultraforming  is  a  regenerative,  fixed-bed  catalytic 
process  especially  designed  to  produce  stocks  with  clear  octane  ratings  up 
to  102  to  104  without  use  of  auxiliary  processes. 
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VRU :  abbreviation  for  vapor  recovery  unit. 

vacuum  distillation:  distillation  under  reduced  pressure;  the  boiling  temperature 
the™by.  reduced  sufficiently  to  prevent  decomposition  or  cracking  of 
the  material  being  distilled.  K  UI 
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LIST  OF  SYMBOLS 


A^  Equivalent  area  subject  to  drag  forces 

A  Area  of  tension  reinforcement 

s 

A  1  Area  of  compressive  reinforcement 

a  1.  Depth  of  compression  area  in  reinforced  concrete  section 
2.  Acceleration 

B  1.  Width  of  building,  perpendicular  to  blast  wave  travel 
2.  Peak  value  of  dynamic  load 

b  Width  of  section 

b  Width  of  loaded  area 

w 

Drag  coefficient 

Cr  Ratio  of  maximum  resistance,  R,  to  peak  load,  B 
C  Ratio  of  load  duration,  t,  to  natural  period, 

Cur  Velocity  of  sound  behind  Shock  Front 

d  Depth  from  compression  face  of  concrete  beam  or  slab 

to  centroid  of  tensile  reinforcement 

d'  Distance  between  tension  and  compression  reinforcement 

E  Modulus  of  elasticity 

f  Forue 

f'  Ultimate  static  compressive  concrete  strength 

f’^c  Ultimate  dynamic  compressive  concrete  strength 
fdy  Dynamic  tensile  yield  stress  in  steel 

f  Static  yield  stress  in  steel 

g  Acceleration  of  gravity 

H  Building  height 
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I 

Xa 

Xg 

*t 

KT 

k 


kE 

Klm 


ksi 

L 


mp 

MT 

m 

N 


Height  of  centroid  or  center  of  gravity 
Moment  of  inertia 
Average  of  I  and  I 

Moment  of  inertia  of  gross  concrete  section 

Moment  of  inertia  of  transformed  reinforced  concrete 
section  after  cracking 

Kiloton,  equivalent  of  1000  tons  of  TNT 

Kip  (1000  lbs.  } 

Effective  spring  stiffness,  ratio  of  force  to  deflection 

Load-mass  factor  (dimensionless)  used  in  natural  period 
formula  to  transform  multiple-degree-of-freedom  system 
into  an  equivalent  single-degree-of-freedom  system 

Kips  per  square  inch 

1.  Length  of  building,  parallel  to  blast  wave  travel 

2.  Span  length 

Plastic  resisting  moment  under  bending  only 
Megaton,  equivalent  to  1,000,000  tons  of  TNT 
Mass 

Quantity;  Number 

Ratio  of  modulus  of  elasticity  of  steel  to  that  of  concrete 

1.  Ratio  of  tensile  steel  reinforcement  to  the  concrete  area 

above  it;  As/bd 

2.  Pressure  on  a  surface 

Ratio  of  compressive  steel  reinforcement  to  the  concrete 
area  bd;  Ag'/bd 

Reflected  pressure  at  angle  of  incidence  of  90  degrees 
Peak  reflected  overpressure 
Incident  overpressure,  at  any  instant  of  time 
Peak  incident  overpressure 
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o  Reflected  pressure  at  angle  of  incidence 
psi  Pounds  per  square  inch 

q  Drag  (dynamic)  pressure 

Reinforcement  index  (p-p1)  f  /f 

1  '  y  c 

qQ  Peak  drag  pressure 

R  Structural  resistance  of  a  member  or  structure, 

generally  the  maximum  static  load  which  can 
be  carried  at  dynamic  yield  stresses 

r  Roentgen 

S  Clearing  distance 

T  Effective  natural  period  of  vibration 

n 

t  Duration  of  load 

t.  Duration  of  an  equivalent  triangular  drag  load  with 

zero  rise  time 

t  Time  at  which  maximum  deflection  is  reached 

m 

t  Duration  of  an  equivalent  triangular  overpressure 

load  with  zero  rise  time 

t  Time  at  which  yielding  begins 

L  Duration  of  an  equivalent  triangular  reflected  pressure 

load  with  zero  rise  time 

t  Duration  of  positive  phase 

U  Shock  front  velocity 

W  Total  weight 

w  Uniformly  distributed  load  per  unit  length 

xe  Deflection  at  effective  yield  point;  elastic  deflection 

x  Maximum  permissible  deflection 

m 

Z  Plastic  modulus  of  section 

a  Angle  of  incidence  between  blast  wave  and  reflecting 

surface 

n  Ductility  ratio;  x^/ xg 
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APPENDIX  D 


EFFECT  OF  VARIATIONS  IN  OVERPRESSURE 
DURATION  ON  STRUCTURAL  VULNERABILITY 


The  following  graph  Is  designed  to  give  a  visual  concept  of 
the  relationship  of  peak  dynamic  load  and  incident  overpressure  duration. 

Jt  covers  kiloton  range  weapons  as  well  as  those  in  the  megaton  range. 

It  can  be  used  to  demonstrate  that  horizontal  surfaces,  such  as  control- 
house  roofs,  are  rather  insensitive  to  incident  overpressure  duration 
for  any  changes  in  weapon  yield  within  the  high  kiloton  and  megaton 
range. 

For  a  given  structure  or  structural  element  with  a  known 
resistance,  (R),  natural  period  (T^),  and  ductility  (n ),  the  graph  shows 
the  relationship  of  the  peak  dynamic  load,  B,  and  the  incident  overpressure 
duration,  t  ,  taking  into  account  the  important  physical  parameters. 

Prime  examples, cited  in  chapter  5,  are  the  controlhouse  roofs,  which 
will  fail  at  1.  5  psi— the  overpressure  generated  by  a  1-MT  weapon  at  a 
10-mile  distance.  For  this  reason,  1-MT  weapons  are  used  as  basis 
for  the  weapon- by -weapon  industrial  damage  analysis  at  the  beginning 
of  chapter  3.  Points  corresponding  to  collapse  of  both  types  of  roofs 
have  been  plotted  on  the  graph,  Regardless  of  the  duration  of  incident 
overpressure  associated  with  kiloton  or  megaton  range  weapons,  the  peak 
dynamic  load  to  cause  this  collapse  changes  so  little  that  it  can  be  con¬ 
sidered  as  constant.  For  parameters  such  as  Ct  andjj  ,  see  table  3. 11 
in  chapter  3.  Parameters  in  table  3.  11  are  based  on  a  20- MT  weapon, 
whereas  additional  calculations  were  made  for  collapse  following  blast 
from  a  1-MT  weapon. 

Another  example  of  the  use  of  the  graph  is  afforded  by  the 
cat  cracker  as  tabulated  in  table  3. 11  (3c).  In  this  case,  the  peak  dynamic 
load  is  .relatively  constant  over  the  megaton  range  but  rises  quite  rapidly 
as  decreases  and  passes  into  the  kiloton  range. 

The  curves  shown  were  prepared  from  those  in  references  73, 
74,  and  75,  by  plotting  the  data  in  different  dimensions.  Assumptions 
used  in  deriving  the  curves  include  the  use  of  a  bilinear  resistance  function 
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for  failure  of  elements,  with  p  representing  the  ratio  between  the  dis¬ 
placement  at  fracture  and  the  displacement  at  the  elastic  limit,  and  the 
use  of  an  equivalent  triangular  representation  of  the  load.  The  formula 
plotted  is : 
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